{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:f328439c-1cab-43eb-a461-0e2c268eeeb2", "version": 1, "metadata": { "timestamp": "2026-09-27T09:48:01Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "e2b", "group": "", "version": "2.46.1", "description": "E2B SDK that give agents cloud environments", "purl": "pkg:npm/e2b@2.46.1", "bom-ref": "pkg:npm/e2b@2.46.1", "author": "FoundryLabs, Inc. (https://e2b.dev)", "properties": [ { "name": "cdx:npm:scripts", "value": "prepublishOnly, build, dev, test, generate, generate:api, generate:envd, generate:envd-api, generate:volume-api, generate:mcp, check-deps, playwright:install, test:bun, test:cf, test:cf:deploy, test:deno, typecheck, lint, format" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://e2b.dev/?utm_source=npm&utm_medium=referral&utm_campaign=package_homepage&utm_content=e2b" }, { "type": "vcs", "url": "https://github.com/e2b-dev/e2b" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@bufbuild\\n@cloudflare\\n@connectrpc\\n@redocly\\n@testing-library\\n@types\\n@typescript\\n@vitejs\\n@vitest" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@bufbuild/protobuf/package.json\\nnode_modules/@cloudflare/vitest-pool-workers/package.json\\nnode_modules/@connectrpc/connect-web/package.json\\nnode_modules/@connectrpc/connect/package.json\\nnode_modules/@redocly/cli/package.json\\nnode_modules/@testing-library/react/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/platform/package.json\\nnode_modules/@types/react-dom/package.json\\nnode_modules/@types/react/package.json\\nnode_modules/@typescript/native/package.json\\nnode_modules/@vitejs/plugin-react/package.json\\nnode_modules/@vitest/browser-playwright/package.json\\nnode_modules/@vitest/browser/package.json\\nnode_modules/chalk/package.json\\nnode_modules/compare-versions/package.json\\nnode_modules/dockerfile-ast/package.json\\nnode_modules/dotenv/package.json\\nnode_modules/error-stack-parser-es/package.json\\nnode_modules/glob/package.json\\nnode_modules/json-schema-to-typescript/package.json\\nnode_modules/knip/package.json\\nnode_modules/msw/package.json\\nnode_modules/npm-run-all/package.json\\nnode_modules/openapi-fetch/package.json\\nnode_modules/openapi-typescript/package.json\\nnode_modules/platform/package.json\\nnode_modules/playwright/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react/package.json\\nnode_modules/tar/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/typescript/package.json\\nnode_modules/undici/package.json\\nnode_modules/undici8/package.json\\nnode_modules/vitest-browser-react/package.json\\nnode_modules/vitest/package.json\\nnode_modules/wrangler/package.json" } ] }, "components": [ { "authors": [ { "name": "wrangler@cloudflare.com" } ], "group": "", "name": "wrangler", "version": "4.123.0", "description": "Command-line interface for all things Cloudflare Workers", "scope": "optional", "licenses": [ { "expression": "MIT OR Apache-2.0" } ], "purl": "pkg:npm/wrangler@4.123.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cloudflare/workers-sdk#readme" }, { "type": "vcs", "url": "https://github.com/cloudflare/workers-sdk.git" } ], "type": "library", "bom-ref": "pkg:npm/wrangler@4.123.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrangler/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrangler/package.json" } ], "concludedValue": "node_modules/wrangler/package.json" } ] } }, { "authors": [ { "name": "Vitest Team" } ], "group": "", "name": "vitest-browser-react", "version": "2.2.0", "description": "Render React components in Vitest Browser Mode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest-browser-react@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-community/vitest-browser-react#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-community/vitest-browser-react.git" } ], "type": "library", "bom-ref": "pkg:npm/vitest-browser-react@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest-browser-react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest-browser-react/package.json" } ], "concludedValue": "node_modules/vitest-browser-react/package.json" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.1.10", "description": "Next generation testing framework powered by Vite", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "ImportedModules", "value": "vitest/config,defineConfig,vitest/config/defineConfig" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ], "occurrences": [ { "location": "vitest.config.mts", "line": 1 }, { "location": "vitest.config.mts", "line": 6 } ] }, "tags": [ "framework" ] }, { "group": "", "name": "undici", "version": "8.10.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@8.10.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@8.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/undici8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici8/package.json" } ], "concludedValue": "node_modules/undici8/package.json" } ] } }, { "group": "", "name": "undici", "version": "7.29.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@7.29.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@7.29.0", "properties": [ { "name": "SrcFile", "value": "node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici/package.json" } ], "concludedValue": "node_modules/undici/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "@typescript", "name": "typescript6", "version": "6.0.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40typescript/typescript6@6.0.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/@typescript/typescript6@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.22.14", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.22.14", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.22.14", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "", "name": "tar", "version": "7.5.22", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@7.5.22", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@7.5.22", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ] } }, { "group": "", "name": "react-dom", "version": "19.2.8", "description": "React package for working with the DOM.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-dom@19.2.8", "externalReferences": [ { "type": "website", "url": "https://react.dev/" }, { "type": "vcs", "url": "https://github.com/react/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-dom@19.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-dom/package.json" } ], "concludedValue": "node_modules/react-dom/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react", "version": "19.2.8", "description": "React is a JavaScript library for building user interfaces.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react@19.2.8", "externalReferences": [ { "type": "website", "url": "https://react.dev/" }, { "type": "vcs", "url": "https://github.com/react/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@19.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corporation" } ], "group": "", "name": "playwright", "version": "1.62.1", "description": "A high-level API to automate web browsers", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/playwright@1.62.1", "externalReferences": [ { "type": "website", "url": "https://playwright.dev" }, { "type": "vcs", "url": "git+https://github.com/microsoft/playwright.git" } ], "type": "framework", "bom-ref": "pkg:npm/playwright@1.62.1", "properties": [ { "name": "SrcFile", "value": "node_modules/playwright/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/playwright/package.json" } ], "concludedValue": "node_modules/playwright/package.json" } ] }, "tags": [ "api", "framework", "web" ] }, { "authors": [ { "name": "Benjamin Tan " } ], "group": "", "name": "platform", "version": "1.3.6", "description": "A platform detection library that works on nearly all JavaScript platforms.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/platform@1.3.6", "type": "library", "bom-ref": "pkg:npm/platform@1.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/platform/package.json" }, { "name": "ImportedModules", "value": "platform" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/platform/package.json" } ], "concludedValue": "node_modules/platform/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 29 }, { "location": "dist/index.mjs", "line": 2 }, { "location": "src/api/metadata.ts", "line": 1 }, { "location": "src/utils.ts", "line": 1 } ] } }, { "authors": [ { "name": "Drew Powers " } ], "group": "", "name": "openapi-typescript", "version": "7.13.0", "description": "Convert OpenAPI 3.0 & 3.1 schemas to TypeScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/openapi-typescript@7.13.0", "externalReferences": [ { "type": "website", "url": "https://openapi-ts.dev" }, { "type": "vcs", "url": "https://github.com/openapi-ts/openapi-typescript" } ], "type": "library", "bom-ref": "pkg:npm/openapi-typescript@7.13.0", "properties": [ { "name": "SrcFile", "value": "node_modules/openapi-typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/openapi-typescript/package.json" } ], "concludedValue": "node_modules/openapi-typescript/package.json" } ] } }, { "authors": [ { "name": "Drew Powers " } ], "group": "", "name": "openapi-fetch", "version": "0.14.1", "description": "Fast, type-safe fetch client for your OpenAPI schema. Only 6 kb (min). Works with React, Vue, Svelte, or vanilla JS.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/openapi-fetch@0.14.1", "externalReferences": [ { "type": "website", "url": "https://openapi-ts.dev" }, { "type": "vcs", "url": "https://github.com/openapi-ts/openapi-typescript" } ], "type": "library", "bom-ref": "pkg:npm/openapi-fetch@0.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/openapi-fetch/package.json" }, { "name": "ImportedModules", "value": "openapi-fetch,FetchResponse,openapi-fetch/FetchResponse,Middleware,openapi-fetch/Middleware" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/openapi-fetch/package.json" } ], "concludedValue": "node_modules/openapi-fetch/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 27 }, { "location": "dist/index.mjs", "line": 1 }, { "location": "dist/index.mjs", "line": 995 }, { "location": "dist/index.mjs", "line": 1527 }, { "location": "dist/index.mjs", "line": 3652 }, { "location": "src/api/index.ts", "line": 1 }, { "location": "src/api/index.ts", "line": 91 }, { "location": "src/envd/api.ts", "line": 1 }, { "location": "src/envd/api.ts", "line": 210 }, { "location": "src/logs.ts", "line": 2 }, { "location": "src/volume/client.ts", "line": 1 }, { "location": "src/volume/client.ts", "line": 122 }, { "location": "dist/index.d.mts", "line": 1 } ] }, "tags": [ "middleware" ] }, { "authors": [ { "name": "Toru Nagashima" } ], "group": "", "name": "npm-run-all", "version": "4.1.5", "description": "A CLI tool to run multiple npm-scripts in parallel or sequential.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-all@4.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/npm-run-all" } ], "type": "library", "bom-ref": "pkg:npm/npm-run-all@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-all/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-all/package.json" } ], "concludedValue": "node_modules/npm-run-all/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Artem Zakharchenko (https://github.com/kettanaito)" } ], "group": "", "name": "msw", "version": "2.15.0", "description": "Seamless REST/GraphQL API mocking library for browser and Node.js.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/msw@2.15.0", "externalReferences": [ { "type": "website", "url": "https://mswjs.io" }, { "type": "vcs", "url": "git+https://github.com/mswjs/msw.git" } ], "type": "library", "bom-ref": "pkg:npm/msw@2.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/msw/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/msw/package.json" } ], "concludedValue": "node_modules/msw/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Lars Kappert " } ], "group": "", "name": "knip", "version": "5.43.6", "description": "Find and fix unused files, dependencies and exports in your TypeScript and JavaScript projects", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/knip@5.43.6", "externalReferences": [ { "type": "website", "url": "https://knip.dev" }, { "type": "vcs", "url": "https://github.com/webpro-nl/knip" } ], "type": "library", "bom-ref": "pkg:npm/knip@5.43.6", "properties": [ { "name": "SrcFile", "value": "node_modules/knip/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/knip/package.json" } ], "concludedValue": "node_modules/knip/package.json" } ] } }, { "authors": [ { "name": "Boris Cherny (https://borischerny.com)" } ], "group": "", "name": "json-schema-to-typescript", "version": "15.0.4", "description": "compile json schema to typescript typings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-to-typescript@15.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bcherny/json-schema-to-typescript#readme" }, { "type": "vcs", "url": "git+https://github.com/bcherny/json-schema-to-typescript.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-to-typescript@15.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-to-typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-to-typescript/package.json" } ], "concludedValue": "node_modules/json-schema-to-typescript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "excluded", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "ImportedModules", "value": "glob,Path,glob/Path" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ], "occurrences": [ { "location": "src/template/utils.ts", "line": 10 } ] } }, { "group": "", "name": "error-stack-parser-es", "version": "2.0.1", "description": "Cross-browser Error parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-stack-parser-es@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/error-stack-parser-es#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/error-stack-parser-es.git" } ], "type": "library", "bom-ref": "pkg:npm/error-stack-parser-es@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/error-stack-parser-es/package.json" }, { "name": "ImportedModules", "value": "error-stack-parser-es,parse,error-stack-parser-es/parse,StackFrame,error-stack-parser-es/StackFrame" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-stack-parser-es/package.json" } ], "concludedValue": "node_modules/error-stack-parser-es/package.json" } ], "occurrences": [ { "location": "src/template/utils.ts", "line": 6 }, { "location": "src/template/utils.ts", "line": 320 } ] }, "tags": [ "parse" ] }, { "group": "", "name": "dotenv", "version": "16.4.5", "description": "Loads environment variables from .env file", "scope": "required", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dotenv@16.4.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/motdotla/dotenv.git" } ], "type": "library", "bom-ref": "pkg:npm/dotenv@16.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/dotenv/package.json" }, { "name": "ImportedModules", "value": "dotenv,config,dotenv/config" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dotenv/package.json" } ], "concludedValue": "node_modules/dotenv/package.json" } ], "occurrences": [ { "location": "vitest.config.mts", "line": 3 }, { "location": "vitest.config.mts", "line": 5 } ] } }, { "authors": [ { "name": "Remy Suen" } ], "group": "", "name": "dockerfile-ast", "version": "0.7.1", "description": "Parse a Dockerfile into an array of instructions and comments.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dockerfile-ast@0.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rcjsuen/dockerfile-ast.git" } ], "type": "library", "bom-ref": "pkg:npm/dockerfile-ast@0.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dockerfile-ast/package.json" }, { "name": "ImportedModules", "value": "dockerfile-ast,DockerfileParser,dockerfile-ast/DockerfileParser,Argument,dockerfile-ast/Argument,Instruction,dockerfile-ast/Instruction,ModifiableInstruction,dockerfile-ast/ModifiableInstruction" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dockerfile-ast/package.json" } ], "concludedValue": "node_modules/dockerfile-ast/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 50 }, { "location": "dist/index.mjs", "line": 15 }, { "location": "dist/index.mjs", "line": 6712 }, { "location": "src/template/dockerfileParser.ts", "line": 7 }, { "location": "src/template/dockerfileParser.ts", "line": 70 } ] } }, { "authors": [ { "name": "Ole Michelsen" } ], "group": "", "name": "compare-versions", "version": "6.1.1", "description": "Compare semver version strings to find greater, equal or lesser.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/compare-versions@6.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/omichelsen/compare-versions#readme" }, { "type": "vcs", "url": "git+https://github.com/omichelsen/compare-versions.git" } ], "type": "library", "bom-ref": "pkg:npm/compare-versions@6.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/compare-versions/package.json" }, { "name": "ImportedModules", "value": "compare-versions,compareVersions,compare-versions/compareVersions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/compare-versions/package.json" } ], "concludedValue": "node_modules/compare-versions/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 31 }, { "location": "dist/index.mjs", "line": 3 }, { "location": "dist/index.mjs", "line": 449 }, { "location": "dist/index.mjs", "line": 1424 }, { "location": "dist/index.mjs", "line": 1769 }, { "location": "dist/index.mjs", "line": 1842 }, { "location": "dist/index.mjs", "line": 1844 }, { "location": "dist/index.mjs", "line": 1849 }, { "location": "dist/index.mjs", "line": 2075 }, { "location": "dist/index.mjs", "line": 2076 }, { "location": "dist/index.mjs", "line": 2077 }, { "location": "dist/index.mjs", "line": 4323 }, { "location": "dist/index.mjs", "line": 4453 }, { "location": "dist/index.mjs", "line": 4982 }, { "location": "dist/index.mjs", "line": 5632 }, { "location": "dist/index.mjs", "line": 5666 }, { "location": "dist/index.mjs", "line": 5705 }, { "location": "dist/index.mjs", "line": 5706 }, { "location": "src/envd/rpc.ts", "line": 4 }, { "location": "src/envd/rpc.ts", "line": 166 }, { "location": "src/sandbox/commands/index.ts", "line": 9 }, { "location": "src/sandbox/commands/index.ts", "line": 157 }, { "location": "src/sandbox/commands/index.ts", "line": 432 }, { "location": "src/sandbox/filesystem/index.ts", "line": 41 }, { "location": "src/sandbox/filesystem/index.ts", "line": 463 }, { "location": "src/sandbox/filesystem/index.ts", "line": 643 }, { "location": "src/sandbox/filesystem/index.ts", "line": 651 }, { "location": "src/sandbox/filesystem/index.ts", "line": 670 }, { "location": "src/sandbox/filesystem/index.ts", "line": 1050 }, { "location": "src/sandbox/filesystem/index.ts", "line": 1060 }, { "location": "src/sandbox/filesystem/index.ts", "line": 1071 }, { "location": "src/sandbox/index.ts", "line": 33 }, { "location": "src/sandbox/index.ts", "line": 767 }, { "location": "src/sandbox/index.ts", "line": 819 }, { "location": "src/sandbox/index.ts", "line": 872 }, { "location": "src/sandbox/index.ts", "line": 878 }, { "location": "src/sandbox/sandboxApi.ts", "line": 8 }, { "location": "src/sandbox/sandboxApi.ts", "line": 1699 }, { "location": "src/undici.ts", "line": 1 }, { "location": "src/undici.ts", "line": 26 } ] } }, { "group": "", "name": "chalk", "version": "5.3.0", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@5.3.0", "type": "library", "bom-ref": "pkg:npm/chalk@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 40 }, { "location": "dist/index.mjs", "line": 10 }, { "location": "dist/index.mjs", "line": 5819 }, { "location": "dist/index.mjs", "line": 5820 }, { "location": "dist/index.mjs", "line": 5821 }, { "location": "dist/index.mjs", "line": 5822 }, { "location": "dist/index.mjs", "line": 5879 }, { "location": "src/template/logger.ts", "line": 1 }, { "location": "src/template/logger.ts", "line": 65 }, { "location": "src/template/logger.ts", "line": 66 }, { "location": "src/template/logger.ts", "line": 67 }, { "location": "src/template/logger.ts", "line": 68 }, { "location": "src/template/logger.ts", "line": 146 } ] } }, { "group": "@vitest", "name": "browser-playwright", "version": "4.1.10", "description": "Browser running for Vitest using playwright", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/browser-playwright@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/config/browser/playwright" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/browser-playwright@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/browser-playwright/package.json" }, { "name": "ImportedModules", "value": "@vitest/browser-playwright,playwright,@vitest/browser-playwright/playwright" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/browser-playwright/package.json" } ], "concludedValue": "node_modules/@vitest/browser-playwright/package.json" } ], "occurrences": [ { "location": "vitest.config.mts", "line": 2 }, { "location": "vitest.config.mts", "line": 47 } ] } }, { "group": "@vitest", "name": "browser", "version": "4.1.10", "description": "Browser running for Vitest", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/browser@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/guide/browser/" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/browser@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/browser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/browser/package.json" } ], "concludedValue": "node_modules/@vitest/browser/package.json" } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "@vitejs", "name": "plugin-react", "version": "4.3.4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitejs/plugin-react@4.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme" }, { "type": "vcs", "url": "git+https://github.com/vitejs/vite-plugin-react.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitejs/plugin-react@4.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitejs/plugin-react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitejs/plugin-react/package.json" } ], "concludedValue": "node_modules/@vitejs/plugin-react/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "7.0.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@7.0.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@typescript/native/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@typescript/native/package.json" } ], "concludedValue": "node_modules/@typescript/native/package.json" } ] } }, { "group": "@types", "name": "react-dom", "version": "19.2.4", "description": "TypeScript definitions for react-dom", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/react-dom@19.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react-dom" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/react-dom@19.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/react-dom/package.json" } ], "concludedValue": "node_modules/@types/react-dom/package.json" } ] } }, { "group": "@types", "name": "react", "version": "19.2.18", "description": "TypeScript definitions for react", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/react@19.2.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/react@19.2.18", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/react/package.json" } ], "concludedValue": "node_modules/@types/react/package.json" } ] } }, { "group": "@types", "name": "platform", "version": "1.3.6", "description": "TypeScript definitions for platform", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/platform@1.3.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/platform" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/platform@1.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/platform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/platform/package.json" } ], "concludedValue": "node_modules/@types/platform/package.json" } ] } }, { "group": "@types", "name": "node", "version": "20.19.43", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@20.19.43", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.19.43", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "Kent C. Dodds (https://kentcdodds.com)" } ], "group": "@testing-library", "name": "react", "version": "16.3.2", "description": "Simple and complete React DOM testing utilities that encourage good testing practices.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40testing-library/react@16.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/testing-library/react-testing-library#readme" }, { "type": "vcs", "url": "https://github.com/testing-library/react-testing-library" } ], "type": "library", "bom-ref": "pkg:npm/@testing-library/react@16.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@testing-library/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@testing-library/react/package.json" } ], "concludedValue": "node_modules/@testing-library/react/package.json" } ] } }, { "group": "@redocly", "name": "cli", "version": "2.46.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40redocly/cli@2.46.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Redocly/redocly-cli" }, { "type": "vcs", "url": "https://github.com/Redocly/redocly-cli.git" } ], "type": "library", "bom-ref": "pkg:npm/@redocly/cli@2.46.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@redocly/cli/package.json" }, { "name": "ExportedModules", "value": "client,client/E2B,E2BClientOpts,client/E2BClientOpts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@redocly/cli/package.json" } ], "concludedValue": "node_modules/@redocly/cli/package.json" } ] } }, { "group": "@connectrpc", "name": "connect-web", "version": "2.1.2", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40connectrpc/connect-web@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/connectrpc/connect-es.git" } ], "type": "library", "bom-ref": "pkg:npm/@connectrpc/connect-web@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@connectrpc/connect-web/package.json" }, { "name": "ImportedModules", "value": "@connectrpc/connect-web,createConnectTransport,@connectrpc/connect-web/createConnectTransport" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@connectrpc/connect-web/package.json" } ], "concludedValue": "node_modules/@connectrpc/connect-web/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 35 }, { "location": "dist/index.mjs", "line": 7 }, { "location": "dist/index.mjs", "line": 5232 }, { "location": "src/sandbox/index.ts", "line": 1 }, { "location": "src/sandbox/index.ts", "line": 169 } ] } }, { "group": "@connectrpc", "name": "connect", "version": "2.1.2", "description": "Type-safe APIs with Protobuf and TypeScript.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40connectrpc/connect@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/connectrpc/connect-es.git" } ], "type": "library", "bom-ref": "pkg:npm/@connectrpc/connect@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@connectrpc/connect/package.json" }, { "name": "ExportedModules", "value": "connectionConfig,ConnectionConfigOpts,connectionConfig/ConnectionConfigOpts,ConnectionOpts,connectionConfig/ConnectionOpts,Username,connectionConfig/Username" }, { "name": "ImportedModules", "value": "@connectrpc/connect,Code,@connectrpc/connect/Code,ConnectError,@connectrpc/connect/ConnectError,createClient,@connectrpc/connect/createClient,Interceptor,@connectrpc/connect/Interceptor,Client,@connectrpc/connect/Client,Transport,@connectrpc/connect/Transport" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@connectrpc/connect/package.json" } ], "concludedValue": "node_modules/@connectrpc/connect/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 32 }, { "location": "dist/index.mjs", "line": 4 }, { "location": "dist/index.mjs", "line": 1761 }, { "location": "dist/index.mjs", "line": 4153 }, { "location": "dist/index.mjs", "line": 4314 }, { "location": "src/envd/api.ts", "line": 18 }, { "location": "src/envd/rpc.ts", "line": 1 }, { "location": "src/logs.ts", "line": 1 }, { "location": "src/sandbox/commands/index.ts", "line": 7 }, { "location": "src/sandbox/commands/index.ts", "line": 147 }, { "location": "src/sandbox/commands/pty.ts", "line": 7 }, { "location": "src/sandbox/commands/pty.ts", "line": 94 }, { "location": "src/sandbox/filesystem/index.ts", "line": 7 }, { "location": "src/sandbox/filesystem/index.ts", "line": 383 }, { "location": "dist/index.d.mts", "line": 2 } ] } }, { "group": "@cloudflare", "name": "vitest-pool-workers", "version": "0.18.7", "description": "Workers Vitest integration for writing Vitest unit and integration tests that run inside the Workers runtime", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cloudflare/vitest-pool-workers@0.18.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cloudflare/workers-sdk/tree/main/packages/vitest-pool-workers#readme" }, { "type": "vcs", "url": "https://github.com/cloudflare/workers-sdk.git" } ], "type": "library", "bom-ref": "pkg:npm/@cloudflare/vitest-pool-workers@0.18.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@cloudflare/vitest-pool-workers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@cloudflare/vitest-pool-workers/package.json" } ], "concludedValue": "node_modules/@cloudflare/vitest-pool-workers/package.json" } ] } }, { "group": "@bufbuild", "name": "protobuf", "version": "2.14.0", "description": "Protocol Buffers for ECMAScript. Fully compliant with the Protobuf conformance tests.", "scope": "required", "licenses": [ { "expression": "Apache-2.0 AND BSD-3-Clause" } ], "purl": "pkg:npm/%40bufbuild/protobuf@2.14.0", "externalReferences": [ { "type": "website", "url": "https://protobufes.com/" }, { "type": "vcs", "url": "https://github.com/bufbuild/protobuf-es.git" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/protobuf@2.14.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@bufbuild/protobuf/package.json" }, { "name": "ImportedModules", "value": "@bufbuild/protobuf/codegenv2,fileDesc,@bufbuild/protobuf/codegenv2/fileDesc,serviceDesc,@bufbuild/protobuf/codegenv2/serviceDesc,GenEnum,@bufbuild/protobuf/codegenv2/GenEnum,GenFile,@bufbuild/protobuf/codegenv2/GenFile,GenMessage,@bufbuild/protobuf/codegenv2/GenMessage,GenService,@bufbuild/protobuf/codegenv2/GenService,enumDesc,@bufbuild/protobuf/codegenv2/enumDesc,messageDesc,@bufbuild/protobuf/codegenv2/messageDesc,@bufbuild/protobuf/wkt,file_google_protobuf_timestamp,@bufbuild/protobuf/wkt/file_google_protobuf_timestamp,Timestamp,@bufbuild/protobuf/wkt/Timestamp,@bufbuild/protobuf,MethodKind,@bufbuild/protobuf/MethodKind,Message,@bufbuild/protobuf/Message" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@bufbuild/protobuf/package.json" } ], "concludedValue": "node_modules/@bufbuild/protobuf/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 33 }, { "location": "dist/index.mjs", "line": 5 }, { "location": "dist/index.mjs", "line": 1539 }, { "location": "dist/index.mjs", "line": 4138 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 10 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 16 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 26 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 52 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 70 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 88 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 106 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 124 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 137 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 155 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 173 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 247 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 270 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 288 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 326 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 358 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 398 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 412 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 426 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 465 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 484 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 503 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 522 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 541 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 555 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 587 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 629 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 709 }, { "location": "src/envd/process/process_pb.ts", "line": 10 }, { "location": "src/envd/process/process_pb.ts", "line": 16 }, { "location": "src/envd/process/process_pb.ts", "line": 24 }, { "location": "src/envd/process/process_pb.ts", "line": 44 }, { "location": "src/envd/process/process_pb.ts", "line": 67 }, { "location": "src/envd/process/process_pb.ts", "line": 100 }, { "location": "src/envd/process/process_pb.ts", "line": 113 }, { "location": "src/envd/process/process_pb.ts", "line": 141 }, { "location": "src/envd/process/process_pb.ts", "line": 159 }, { "location": "src/envd/process/process_pb.ts", "line": 195 }, { "location": "src/envd/process/process_pb.ts", "line": 218 }, { "location": "src/envd/process/process_pb.ts", "line": 231 }, { "location": "src/envd/process/process_pb.ts", "line": 278 }, { "location": "src/envd/process/process_pb.ts", "line": 297 }, { "location": "src/envd/process/process_pb.ts", "line": 338 }, { "location": "src/envd/process/process_pb.ts", "line": 371 }, { "location": "src/envd/process/process_pb.ts", "line": 385 }, { "location": "src/envd/process/process_pb.ts", "line": 403 }, { "location": "src/envd/process/process_pb.ts", "line": 421 }, { "location": "src/envd/process/process_pb.ts", "line": 444 }, { "location": "src/envd/process/process_pb.ts", "line": 457 }, { "location": "src/envd/process/process_pb.ts", "line": 490 }, { "location": "src/envd/process/process_pb.ts", "line": 530 }, { "location": "src/envd/process/process_pb.ts", "line": 549 }, { "location": "src/envd/process/process_pb.ts", "line": 568 }, { "location": "src/envd/process/process_pb.ts", "line": 582 }, { "location": "src/envd/process/process_pb.ts", "line": 595 }, { "location": "src/envd/process/process_pb.ts", "line": 618 }, { "location": "src/envd/process/process_pb.ts", "line": 631 }, { "location": "src/envd/process/process_pb.ts", "line": 649 }, { "location": "src/envd/process/process_pb.ts", "line": 662 }, { "location": "src/envd/process/process_pb.ts", "line": 680 }, { "location": "src/envd/process/process_pb.ts", "line": 713 }, { "location": "src/envd/process/process_pb.ts", "line": 740 }, { "location": "src/envd/process/process_pb.ts", "line": 815 }, { "location": "dist/index.d.mts", "line": 3 }, { "location": "dist/index.js", "line": 34 }, { "location": "dist/index.mjs", "line": 6 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 17 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 18 }, { "location": "src/sandbox/filesystem/index.ts", "line": 40 }, { "location": "dist/index.d.mts", "line": 4 }, { "location": "src/envd/filesystem/filesystem_connect.ts", "line": 26 }, { "location": "src/envd/filesystem/filesystem_pb.ts", "line": 19 }, { "location": "src/envd/process/process_connect.ts", "line": 24 }, { "location": "src/envd/process/process_pb.ts", "line": 17 }, { "location": "dist/index.d.mts", "line": 6 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/e2b@2.46.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-27T09:48:01Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, September 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'e2b' with version '2.46.1'. The package type in this SBOM is npm with 9 purl namespaces described under components. The components were identified from 38 source files." } ] }