{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:cb266cfb-fb48-47fc-b6c1-5381b59cdbf7", "version": 1, "metadata": { "timestamp": "2026-09-25T12:55:06Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "shared-internals", "group": "@embroider", "version": "3.1.1", "description": "Utilities shared among the other embroider packages", "purl": "pkg:npm/%40embroider/shared-internals@3.1.1", "bom-ref": "pkg:npm/@embroider/shared-internals@3.1.1", "author": "Edward Faulkner", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/embroider-build/embroider.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@embroider\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@embroider/test-support/package.json\\nnode_modules/@types/babel__core/package.json\\nnode_modules/@types/babel__traverse/package.json\\nnode_modules/@types/debug/package.json\\nnode_modules/@types/fs-extra/package.json\\nnode_modules/@types/js-string-escape/package.json\\nnode_modules/@types/lodash/package.json\\nnode_modules/@types/minimatch/package.json\\nnode_modules/@types/semver/package.json\\nnode_modules/@types/tmp/package.json\\nnode_modules/babel-import-util/package.json\\nnode_modules/broccoli-node-api/package.json\\nnode_modules/debug/package.json\\nnode_modules/ember-rfc176-data/package.json\\nnode_modules/fixturify/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/is-subdir/package.json\\nnode_modules/js-string-escape/package.json\\nnode_modules/lodash/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/pkg-entry-points/package.json\\nnode_modules/resolve-package-path/package.json\\nnode_modules/resolve.exports/package.json\\nnode_modules/scenario-tester/package.json\\nnode_modules/semver/package.json\\nnode_modules/tmp/package.json\\nnode_modules/typescript-memoize/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Darryl Hodgins " } ], "group": "", "name": "typescript-memoize", "version": "1.1.1", "description": "Memoize decorator for Typescript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript-memoize@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/darrylhodgins/typescript-memoize#readme" }, { "type": "vcs", "url": "git+https://github.com/darrylhodgins/typescript-memoize.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript-memoize@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript-memoize/package.json" }, { "name": "ImportedModules", "value": "typescript-memoize,Memoize,typescript-memoize/Memoize" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript-memoize/package.json" } ], "concludedValue": "node_modules/typescript-memoize/package.json" } ], "occurrences": [ { "location": "src/package.js", "line": 12 }, { "location": "src/package.ts", "line": 1 }, { "location": "src/package.ts", "line": 60 }, { "location": "src/package.ts", "line": 82 }, { "location": "src/package.ts", "line": 183 }, { "location": "src/package.ts", "line": 254 } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "KARASZI István (http://raszi.hu/)" } ], "group": "", "name": "tmp", "version": "0.1.0", "description": "Temporary file and directory creator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tmp@0.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/raszi/node-tmp" } ], "type": "library", "bom-ref": "pkg:npm/tmp@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tmp/package.json" }, { "name": "ExportedModules", "value": "tmpdir" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tmp/package.json" } ], "concludedValue": "node_modules/tmp/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.1", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Edward Faulkner " } ], "group": "", "name": "scenario-tester", "version": "4.1.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/scenario-tester@4.1.1", "type": "library", "bom-ref": "pkg:npm/scenario-tester@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/scenario-tester/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/scenario-tester/package.json" } ], "concludedValue": "node_modules/scenario-tester/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "resolve.exports", "version": "2.0.3", "description": "A tiny (952b), correct, general-purpose, and configurable \"exports\" and \"imports\" resolver without file-system reliance", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve.exports@2.0.3", "type": "library", "bom-ref": "pkg:npm/resolve.exports@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve.exports/package.json" }, { "name": "ImportedModules", "value": "resolve.exports,resolve,resolve.exports/resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve.exports/package.json" } ], "concludedValue": "node_modules/resolve.exports/package.json" } ], "occurrences": [ { "location": "src/colocation.js", "line": 10 }, { "location": "src/colocation.ts", "line": 5 }, { "location": "src/colocation.ts", "line": 47 } ] } }, { "group": "", "name": "resolve-package-path", "version": "4.0.3", "description": "a special purpose fast memoizing way to resolve a node modules package.json", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-package-path@4.0.3", "type": "library", "bom-ref": "pkg:npm/resolve-package-path@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-package-path/package.json" }, { "name": "ImportedModules", "value": "resolve-package-path" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-package-path/package.json" } ], "concludedValue": "node_modules/resolve-package-path/package.json" } ], "occurrences": [ { "location": "src/package-cache.js", "line": 9 }, { "location": "src/package-cache.ts", "line": 4 }, { "location": "src/package-cache.ts", "line": 42 } ] } }, { "authors": [ { "name": "Hiroki Osame " } ], "group": "", "name": "pkg-entry-points", "version": "1.1.1", "description": "Get all entry-points for an npm package. Supports the `exports` field in `package.json`.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-entry-points@1.1.1", "type": "library", "bom-ref": "pkg:npm/pkg-entry-points@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-entry-points/package.json" }, { "name": "ImportedModules", "value": "pkg-entry-points,getPackageEntryPointsSync,pkg-entry-points/getPackageEntryPointsSync" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-entry-points/package.json" } ], "concludedValue": "node_modules/pkg-entry-points/package.json" } ], "occurrences": [ { "location": "src/watch-utils.js", "line": 11 }, { "location": "src/watch-utils.ts", "line": 3 }, { "location": "src/watch-utils.ts", "line": 37 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "ImportedModules", "value": "minimatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ], "occurrences": [ { "location": "src/template-colocation-plugin.js", "line": 13 }, { "location": "src/template-colocation-plugin.ts", "line": 9 }, { "location": "src/template-colocation-plugin.ts", "line": 78 } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.18.1", "description": "Lodash modular utilities.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "ImportedModules", "value": "lodash/get,lodash/flatMap,lodash/cloneDeep" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ], "occurrences": [ { "location": "src/package.js", "line": 15 }, { "location": "src/package.ts", "line": 4 }, { "location": "src/package.ts", "line": 124 }, { "location": "src/package.js", "line": 16 }, { "location": "src/package.js", "line": 17 }, { "location": "src/package.ts", "line": 7 }, { "location": "src/package.ts", "line": 8 }, { "location": "src/package.ts", "line": 234 }, { "location": "src/package.ts", "line": 73 } ] } }, { "authors": [ { "name": "Jo Liss " } ], "group": "", "name": "js-string-escape", "version": "1.0.1", "description": "Escape strings for use as JavaScript string literals", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-string-escape@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joliss/js-string-escape" } ], "type": "library", "bom-ref": "pkg:npm/js-string-escape@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-string-escape/package.json" }, { "name": "ImportedModules", "value": "js-string-escape" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-string-escape/package.json" } ], "concludedValue": "node_modules/js-string-escape/package.json" } ], "occurrences": [ { "location": "src/hbs-to-js.js", "line": 7 }, { "location": "src/hbs-to-js.ts", "line": 1 }, { "location": "src/hbs-to-js.ts", "line": 30 }, { "location": "src/hbs-to-js.ts", "line": 34 } ] } }, { "authors": [ { "name": "Zoltan Kochan (https://www.kochan.io)" } ], "group": "", "name": "is-subdir", "version": "1.2.0", "description": "Return whether a directory is a subdirectory of another directory", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-subdir@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zkochan/packages/tree/master/is-subdir#readme" } ], "type": "library", "bom-ref": "pkg:npm/is-subdir@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-subdir/package.json" }, { "name": "ImportedModules", "value": "is-subdir" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-subdir/package.json" } ], "concludedValue": "node_modules/is-subdir/package.json" } ], "occurrences": [ { "location": "src/watch-utils.js", "line": 9 }, { "location": "src/watch-utils.ts", "line": 1 }, { "location": "src/watch-utils.ts", "line": 22 }, { "location": "src/watch-utils.ts", "line": 24 } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "9.1.0", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@9.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@9.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "ImportedModules", "value": "fs-extra,readJSONSync,fs-extra/readJSONSync,existsSync,fs-extra/existsSync,readFileSync,fs-extra/readFileSync,realpathSync,fs-extra/realpathSync" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ], "occurrences": [ { "location": "src/babel-plugin-cache-busting.js", "line": 5 }, { "location": "src/colocation.js", "line": 7 }, { "location": "src/package.js", "line": 13 }, { "location": "src/rewritten-package-cache.js", "line": 9 }, { "location": "src/tmpdir.js", "line": 3 }, { "location": "src/working-dir.js", "line": 6 }, { "location": "src/babel-plugin-cache-busting.ts", "line": 1 }, { "location": "src/babel-plugin-cache-busting.ts", "line": 16 }, { "location": "src/colocation.ts", "line": 1 }, { "location": "src/colocation.ts", "line": 36 }, { "location": "src/package.ts", "line": 2 }, { "location": "src/package.ts", "line": 63 }, { "location": "src/package.ts", "line": 214 }, { "location": "src/rewritten-package-cache.ts", "line": 4 }, { "location": "src/rewritten-package-cache.ts", "line": 139 }, { "location": "src/rewritten-package-cache.ts", "line": 147 }, { "location": "src/rewritten-package-cache.ts", "line": 150 }, { "location": "src/tmpdir.ts", "line": 1 }, { "location": "src/tmpdir.ts", "line": 13 }, { "location": "src/working-dir.ts", "line": 3 }, { "location": "src/working-dir.ts", "line": 25 } ] } }, { "authors": [ { "name": "Jo Liss " } ], "group": "", "name": "fixturify", "version": "2.1.1", "description": "Convert objects into directory structures and back again", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fixturify@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joliss/node-fixturify" } ], "type": "library", "bom-ref": "pkg:npm/fixturify@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fixturify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fixturify/package.json" } ], "concludedValue": "node_modules/fixturify/package.json" } ] } }, { "authors": [ { "name": "Tom Dale " } ], "group": "", "name": "ember-rfc176-data", "version": "0.3.18", "description": "JSON data for Ember.js RFC #176", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ember-rfc176-data@0.3.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ember-cli/ember-rfc176-data#readme" }, { "type": "vcs", "url": "git+https://github.com/ember-cli/ember-rfc176-data.git" } ], "type": "framework", "bom-ref": "pkg:npm/ember-rfc176-data@0.3.18", "properties": [ { "name": "SrcFile", "value": "node_modules/ember-rfc176-data/package.json" }, { "name": "ImportedModules", "value": "ember-rfc176-data/mappings.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ember-rfc176-data/package.json" } ], "concludedValue": "node_modules/ember-rfc176-data/package.json" } ], "occurrences": [ { "location": "src/ember-standard-modules.ts", "line": 14 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "src/template-colocation-plugin.js", "line": 12 }, { "location": "src/template-colocation-plugin.ts", "line": 8 }, { "location": "src/template-colocation-plugin.ts", "line": 12 } ] } }, { "authors": [ { "name": "Jo Liss " } ], "group": "", "name": "broccoli-node-api", "version": "1.7.0", "description": "Broccoli Plugin API Types", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/broccoli-node-api@1.7.0", "type": "library", "bom-ref": "pkg:npm/broccoli-node-api@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/broccoli-node-api/package.json" }, { "name": "ImportedModules", "value": "broccoli-node-api,Node,broccoli-node-api/Node" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/broccoli-node-api/package.json" } ], "concludedValue": "node_modules/broccoli-node-api/package.json" } ], "occurrences": [ { "location": "src/ember-cli-models.ts", "line": 2 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Edward Faulkner " } ], "group": "", "name": "babel-import-util", "version": "3.0.1", "description": "Utility for manipulating imports within babel plugins", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/babel-import-util@3.0.1", "type": "library", "bom-ref": "pkg:npm/babel-import-util@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-import-util/package.json" }, { "name": "ImportedModules", "value": "babel-import-util,ImportUtil,babel-import-util/ImportUtil" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-import-util/package.json" } ], "concludedValue": "node_modules/babel-import-util/package.json" } ], "occurrences": [ { "location": "src/template-colocation-plugin.js", "line": 11 }, { "location": "src/template-colocation-plugin.ts", "line": 7 } ] } }, { "group": "@types", "name": "tmp", "version": "0.1.0", "description": "TypeScript definitions for tmp", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/tmp@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/tmp@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/tmp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/tmp/package.json" } ], "concludedValue": "node_modules/@types/tmp/package.json" } ] } }, { "group": "@types", "name": "semver", "version": "7.7.1", "description": "TypeScript definitions for semver", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/semver@7.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/semver" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/semver@7.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/semver/package.json" } ], "concludedValue": "node_modules/@types/semver/package.json" } ] } }, { "group": "@types", "name": "minimatch", "version": "3.0.5", "description": "TypeScript definitions for Minimatch", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/minimatch@3.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/minimatch" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/minimatch@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/minimatch/package.json" } ], "concludedValue": "node_modules/@types/minimatch/package.json" } ] } }, { "group": "@types", "name": "lodash", "version": "4.17.24", "description": "TypeScript definitions for lodash", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash@4.17.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash@4.17.24", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash/package.json" } ], "concludedValue": "node_modules/@types/lodash/package.json" } ] } }, { "group": "@types", "name": "js-string-escape", "version": "1.0.3", "description": "TypeScript definitions for js-string-escape", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/js-string-escape@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/js-string-escape" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/js-string-escape@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/js-string-escape/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/js-string-escape/package.json" } ], "concludedValue": "node_modules/@types/js-string-escape/package.json" } ] } }, { "group": "@types", "name": "fs-extra", "version": "9.0.13", "description": "TypeScript definitions for fs-extra", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/fs-extra@9.0.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/fs-extra" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/fs-extra@9.0.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/fs-extra/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/fs-extra/package.json" } ], "concludedValue": "node_modules/@types/fs-extra/package.json" } ] } }, { "group": "@types", "name": "debug", "version": "4.1.13", "description": "TypeScript definitions for debug", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/debug@4.1.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/debug@4.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/debug/package.json" } ], "concludedValue": "node_modules/@types/debug/package.json" } ] } }, { "group": "@types", "name": "babel__traverse", "version": "7.28.0", "description": "TypeScript definitions for @babel/traverse", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/babel__traverse@7.28.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__traverse" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/babel__traverse@7.28.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/babel__traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/babel__traverse/package.json" } ], "concludedValue": "node_modules/@types/babel__traverse/package.json" } ] } }, { "group": "@types", "name": "babel__core", "version": "7.20.5", "description": "TypeScript definitions for @babel/core", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/babel__core@7.20.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__core" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/babel__core@7.20.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/babel__core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/babel__core/package.json" } ], "concludedValue": "node_modules/@types/babel__core/package.json" } ] } }, { "group": "@embroider", "name": "test-support", "version": "0.36.0", "scope": "optional", "purl": "pkg:npm/%40embroider/test-support@0.36.0", "type": "library", "bom-ref": "pkg:npm/@embroider/test-support@0.36.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@embroider/test-support/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@embroider/test-support/package.json" } ], "concludedValue": "node_modules/@embroider/test-support/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@embroider/shared-internals@3.1.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-25T12:55:06Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, September 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'shared-internals' with version '3.1.1'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 28 source files." } ] }