{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:71a5ad34-9ddf-4303-8c70-13c52d2ebb01", "version": 1, "metadata": { "timestamp": "2026-09-24T16:59:26Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "escodegen", "group": "", "version": "0.0.23", "description": "ECMAScript code generator", "purl": "pkg:npm/escodegen@0.0.23", "bom-ref": "pkg:npm/escodegen@0.0.23", "properties": [ { "name": "cdx:npm:bin", "value": "esgenerate, escodegen" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, release, build" }, { "name": "cdx:npm:buildScripts", "value": "build" } ], "type": "application", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/escodegen.html" }, { "type": "vcs", "url": "http://github.com/Constellation/escodegen.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@my-scope" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/JSONStream/package.json\\nnode_modules/acorn-node/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/asap/package.json\\nnode_modules/asn1.js/node_modules/bn.js/package.json\\nnode_modules/asn1.js/package.json\\nnode_modules/assert/node_modules/inherits/package.json\\nnode_modules/assert/node_modules/util/package.json\\nnode_modules/assert/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/bn.js/package.json\\nnode_modules/bower/lib/node_modules/abbrev/package.json\\nnode_modules/bower/lib/node_modules/ansi-regex/package.json\\nnode_modules/bower/lib/node_modules/ansi-styles/package.json\\nnode_modules/bower/lib/node_modules/ansicolors/package.json\\nnode_modules/bower/lib/node_modules/archy/package.json\\nnode_modules/bower/lib/node_modules/array-filter/package.json\\nnode_modules/bower/lib/node_modules/array-map/package.json\\nnode_modules/bower/lib/node_modules/array-reduce/package.json\\nnode_modules/bower/lib/node_modules/asn1/package.json\\nnode_modules/bower/lib/node_modules/assert-plus/package.json\\nnode_modules/bower/lib/node_modules/async/package.json\\nnode_modules/bower/lib/node_modules/asynckit/package.json\\nnode_modules/bower/lib/node_modules/aws-sign2/package.json\\nnode_modules/bower/lib/node_modules/aws4/package.json\\nnode_modules/bower/lib/node_modules/balanced-match/package.json\\nnode_modules/bower/lib/node_modules/bcrypt-pbkdf/package.json\\nnode_modules/bower/lib/node_modules/binary/package.json\\nnode_modules/bower/lib/node_modules/bl/node_modules/readable-stream/package.json\\nnode_modules/bower/lib/node_modules/bl/package.json\\nnode_modules/bower/lib/node_modules/boom/package.json\\nnode_modules/bower/lib/node_modules/bower-config/node_modules/mout/package.json\\nnode_modules/bower/lib/node_modules/bower-config/package.json\\nnode_modules/bower/lib/node_modules/bower-endpoint-parser/package.json\\nnode_modules/bower/lib/node_modules/bower-json/package.json\\nnode_modules/bower/lib/node_modules/bower-logger/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/ajv/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/caseless/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/form-data/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/har-validator/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/mkdirp/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/qs/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/request/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/tough-cookie/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/tunnel-agent/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/node_modules/uuid/package.json\\nnode_modules/bower/lib/node_modules/bower-registry-client/package.json\\nnode_modules/bower/lib/node_modules/boxen/package.json\\nnode_modules/bower/lib/node_modules/brace-expansion/package.json\\nnode_modules/bower/lib/node_modules/buffers/package.json\\nnode_modules/bower/lib/node_modules/capture-stack-trace/package.json\\nnode_modules/bower/lib/node_modules/cardinal/package.json\\nnode_modules/bower/lib/node_modules/caseless/package.json\\nnode_modules/bower/lib/node_modules/chainsaw/package.json\\nnode_modules/bower/lib/node_modules/chalk/node_modules/supports-color/package.json\\nnode_modules/bower/lib/node_modules/chalk/package.json\\nnode_modules/bower/lib/node_modules/chmodr/package.json\\nnode_modules/bower/lib/node_modules/chownr/package.json\\nnode_modules/bower/lib/node_modules/cli-width/package.json\\nnode_modules/bower/lib/node_modules/co/package.json\\nnode_modules/bower/lib/node_modules/code-point-at/package.json\\nnode_modules/bower/lib/node_modules/combined-stream/package.json\\nnode_modules/bower/lib/node_modules/commander/package.json\\nnode_modules/bower/lib/node_modules/concat-map/package.json\\nnode_modules/bower/lib/node_modules/configstore/node_modules/mkdirp/package.json\\nnode_modules/bower/lib/node_modules/configstore/package.json\\nnode_modules/bower/lib/node_modules/core-util-is/package.json\\nnode_modules/bower/lib/node_modules/create-error-class/package.json\\nnode_modules/bower/lib/node_modules/cryptiles/package.json\\nnode_modules/bower/lib/node_modules/dashdash/package.json\\nnode_modules/bower/lib/node_modules/decompress-zip/node_modules/isarray/package.json\\nnode_modules/bower/lib/node_modules/decompress-zip/node_modules/readable-stream/package.json\\nnode_modules/bower/lib/node_modules/decompress-zip/package.json\\nnode_modules/bower/lib/node_modules/deep-extend/package.json\\nnode_modules/bower/lib/node_modules/delayed-stream/package.json\\nnode_modules/bower/lib/node_modules/destroy/package.json\\nnode_modules/bower/lib/node_modules/dot-prop/package.json\\nnode_modules/bower/lib/node_modules/duplexer2/package.json\\nnode_modules/bower/lib/node_modules/ecc-jsbn/package.json\\nnode_modules/bower/lib/node_modules/end-of-stream/package.json\\nnode_modules/bower/lib/node_modules/ends-with/package.json\\nnode_modules/bower/lib/node_modules/error-ex/package.json\\nnode_modules/bower/lib/node_modules/escape-string-regexp/package.json\\nnode_modules/bower/lib/node_modules/exit-hook/package.json\\nnode_modules/bower/lib/node_modules/ext-list/package.json\\nnode_modules/bower/lib/node_modules/extend/package.json\\nnode_modules/bower/lib/node_modules/extsprintf/package.json\\nnode_modules/bower/lib/node_modules/figures/package.json\\nnode_modules/bower/lib/node_modules/filled-array/package.json\\nnode_modules/bower/lib/node_modules/findup-sync/node_modules/glob/package.json\\nnode_modules/bower/lib/node_modules/findup-sync/package.json\\nnode_modules/bower/lib/node_modules/forever-agent/package.json\\nnode_modules/bower/lib/node_modules/form-data/node_modules/async/package.json\\nnode_modules/bower/lib/node_modules/form-data/node_modules/lodash/package.json\\nnode_modules/bower/lib/node_modules/form-data/package.json\\nnode_modules/bower/lib/node_modules/fs-write-stream-atomic/package.json\\nnode_modules/bower/lib/node_modules/fs.realpath/package.json\\nnode_modules/bower/lib/node_modules/fstream-ignore/package.json\\nnode_modules/bower/lib/node_modules/fstream/node_modules/mkdirp/package.json\\nnode_modules/bower/lib/node_modules/fstream/package.json\\nnode_modules/bower/lib/node_modules/generate-function/package.json\\nnode_modules/bower/lib/node_modules/generate-object-property/package.json\\nnode_modules/bower/lib/node_modules/getpass/package.json\\nnode_modules/bower/lib/node_modules/github/package.json\\nnode_modules/bower/lib/node_modules/glob/node_modules/minimatch/package.json\\nnode_modules/bower/lib/node_modules/glob/package.json\\nnode_modules/bower/lib/node_modules/got/node_modules/parse-json/package.json\\nnode_modules/bower/lib/node_modules/got/package.json\\nnode_modules/bower/lib/node_modules/graceful-fs/package.json\\nnode_modules/bower/lib/node_modules/handlebars/package.json\\nnode_modules/bower/lib/node_modules/har-schema/package.json\\nnode_modules/bower/lib/node_modules/har-validator/node_modules/commander/package.json\\nnode_modules/bower/lib/node_modules/har-validator/package.json\\nnode_modules/bower/lib/node_modules/has-ansi/package.json\\nnode_modules/bower/lib/node_modules/hawk/package.json\\nnode_modules/bower/lib/node_modules/hoek/package.json\\nnode_modules/bower/lib/node_modules/http-signature/node_modules/assert-plus/package.json\\nnode_modules/bower/lib/node_modules/http-signature/package.json\\nnode_modules/bower/lib/node_modules/iferr/package.json\\nnode_modules/bower/lib/node_modules/imurmurhash/package.json\\nnode_modules/bower/lib/node_modules/inflight/package.json\\nnode_modules/bower/lib/node_modules/inherits/package.json\\nnode_modules/bower/lib/node_modules/ini/package.json\\nnode_modules/bower/lib/node_modules/inquirer/node_modules/ansi-escapes/package.json\\nnode_modules/bower/lib/node_modules/inquirer/node_modules/cli-cursor/package.json\\nnode_modules/bower/lib/node_modules/inquirer/node_modules/lodash/package.json\\nnode_modules/bower/lib/node_modules/inquirer/node_modules/onetime/package.json\\nnode_modules/bower/lib/node_modules/inquirer/node_modules/restore-cursor/package.json\\nnode_modules/bower/lib/node_modules/inquirer/node_modules/rx-lite/package.json\\nnode_modules/bower/lib/node_modules/inquirer/package.json\\nnode_modules/bower/lib/node_modules/intersect/package.json\\nnode_modules/bower/lib/node_modules/is-arrayish/package.json\\nnode_modules/bower/lib/node_modules/is-finite/package.json\\nnode_modules/bower/lib/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/bower/lib/node_modules/is-my-ip-valid/package.json\\nnode_modules/bower/lib/node_modules/is-my-json-valid/package.json\\nnode_modules/bower/lib/node_modules/is-npm/package.json\\nnode_modules/bower/lib/node_modules/is-obj/package.json\\nnode_modules/bower/lib/node_modules/is-plain-obj/package.json\\nnode_modules/bower/lib/node_modules/is-property/package.json\\nnode_modules/bower/lib/node_modules/is-redirect/package.json\\nnode_modules/bower/lib/node_modules/is-retry-allowed/package.json\\nnode_modules/bower/lib/node_modules/is-root/package.json\\nnode_modules/bower/lib/node_modules/is-stream/package.json\\nnode_modules/bower/lib/node_modules/is-typedarray/package.json\\nnode_modules/bower/lib/node_modules/isarray/package.json\\nnode_modules/bower/lib/node_modules/isexe/package.json\\nnode_modules/bower/lib/node_modules/isstream/package.json\\nnode_modules/bower/lib/node_modules/jsbn/package.json\\nnode_modules/bower/lib/node_modules/json-schema/package.json\\nnode_modules/bower/lib/node_modules/json-stable-stringify/package.json\\nnode_modules/bower/lib/node_modules/json-stringify-safe/package.json\\nnode_modules/bower/lib/node_modules/jsonify/package.json\\nnode_modules/bower/lib/node_modules/jsonpointer/package.json\\nnode_modules/bower/lib/node_modules/jsprim/package.json\\nnode_modules/bower/lib/node_modules/junk/package.json\\nnode_modules/bower/lib/node_modules/latest-version/package.json\\nnode_modules/bower/lib/node_modules/lockfile/package.json\\nnode_modules/bower/lib/node_modules/lowercase-keys/package.json\\nnode_modules/bower/lib/node_modules/lru-cache/package.json\\nnode_modules/bower/lib/node_modules/md5-hex/package.json\\nnode_modules/bower/lib/node_modules/md5-o-matic/package.json\\nnode_modules/bower/lib/node_modules/mime-db/package.json\\nnode_modules/bower/lib/node_modules/mime-types/package.json\\nnode_modules/bower/lib/node_modules/mime/package.json\\nnode_modules/bower/lib/node_modules/minimatch/package.json\\nnode_modules/bower/lib/node_modules/minimist/package.json\\nnode_modules/bower/lib/node_modules/mkdirp/package.json\\nnode_modules/bower/lib/node_modules/mkpath/package.json\\nnode_modules/bower/lib/node_modules/mout/package.json\\nnode_modules/bower/lib/node_modules/mute-stream/package.json\\nnode_modules/bower/lib/node_modules/neo-async/package.json\\nnode_modules/bower/lib/node_modules/nested-error-stacks/package.json\\nnode_modules/bower/lib/node_modules/node-status-codes/package.json\\nnode_modules/bower/lib/node_modules/node-uuid/package.json\\nnode_modules/bower/lib/node_modules/nopt/package.json\\nnode_modules/bower/lib/node_modules/number-is-nan/package.json\\nnode_modules/bower/lib/node_modules/oauth-sign/package.json\\nnode_modules/bower/lib/node_modules/object-assign/package.json\\nnode_modules/bower/lib/node_modules/once/package.json\\nnode_modules/bower/lib/node_modules/opn/package.json\\nnode_modules/bower/lib/node_modules/optimist/package.json\\nnode_modules/bower/lib/node_modules/os-homedir/package.json\\nnode_modules/bower/lib/node_modules/os-tmpdir/package.json\\nnode_modules/bower/lib/node_modules/osenv/package.json\\nnode_modules/bower/lib/node_modules/p-throttler/node_modules/q/package.json\\nnode_modules/bower/lib/node_modules/p-throttler/package.json\\nnode_modules/bower/lib/node_modules/package-json/node_modules/semver/package.json\\nnode_modules/bower/lib/node_modules/package-json/package.json\\nnode_modules/bower/lib/node_modules/path-is-absolute/package.json\\nnode_modules/bower/lib/node_modules/path-parse/package.json\\nnode_modules/bower/lib/node_modules/performance-now/package.json\\nnode_modules/bower/lib/node_modules/pinkie-promise/package.json\\nnode_modules/bower/lib/node_modules/pinkie/package.json\\nnode_modules/bower/lib/node_modules/prepend-http/package.json\\nnode_modules/bower/lib/node_modules/process-nextick-args/package.json\\nnode_modules/bower/lib/node_modules/promptly/package.json\\nnode_modules/bower/lib/node_modules/pump/package.json\\nnode_modules/bower/lib/node_modules/punycode/package.json\\nnode_modules/bower/lib/node_modules/q/package.json\\nnode_modules/bower/lib/node_modules/rc/package.json\\nnode_modules/bower/lib/node_modules/read-all-stream/package.json\\nnode_modules/bower/lib/node_modules/read/package.json\\nnode_modules/bower/lib/node_modules/readable-stream/node_modules/string_decoder/package.json\\nnode_modules/bower/lib/node_modules/readable-stream/package.json\\nnode_modules/bower/lib/node_modules/readline2/node_modules/mute-stream/package.json\\nnode_modules/bower/lib/node_modules/readline2/package.json\\nnode_modules/bower/lib/node_modules/redeyed/node_modules/esprima/package.json\\nnode_modules/bower/lib/node_modules/redeyed/package.json\\nnode_modules/bower/lib/node_modules/registry-auth-token/package.json\\nnode_modules/bower/lib/node_modules/registry-url/package.json\\nnode_modules/bower/lib/node_modules/repeating/package.json\\nnode_modules/bower/lib/node_modules/request-progress/package.json\\nnode_modules/bower/lib/node_modules/request-replay/package.json\\nnode_modules/bower/lib/node_modules/request/node_modules/qs/package.json\\nnode_modules/bower/lib/node_modules/request/package.json\\nnode_modules/bower/lib/node_modules/requireg/node_modules/rc/package.json\\nnode_modules/bower/lib/node_modules/requireg/node_modules/resolve/package.json\\nnode_modules/bower/lib/node_modules/requireg/node_modules/strip-json-comments/package.json\\nnode_modules/bower/lib/node_modules/requireg/package.json\\nnode_modules/bower/lib/node_modules/requireg/test/fixtures/lib/node_modules/beaker/package.json\\nnode_modules/bower/lib/node_modules/resolve/package.json\\nnode_modules/bower/lib/node_modules/retry/package.json\\nnode_modules/bower/lib/node_modules/rimraf/node_modules/glob/package.json\\nnode_modules/bower/lib/node_modules/rimraf/package.json\\nnode_modules/bower/lib/node_modules/run-async/package.json\\nnode_modules/bower/lib/node_modules/safe-buffer/package.json\\nnode_modules/bower/lib/node_modules/safer-buffer/package.json\\nnode_modules/bower/lib/node_modules/semver-diff/node_modules/semver/package.json\\nnode_modules/bower/lib/node_modules/semver-diff/package.json\\nnode_modules/bower/lib/node_modules/semver-utils/package.json\\nnode_modules/bower/lib/node_modules/semver/package.json\\nnode_modules/bower/lib/node_modules/shell-quote/package.json\\nnode_modules/bower/lib/node_modules/slide/package.json\\nnode_modules/bower/lib/node_modules/sntp/package.json\\nnode_modules/bower/lib/node_modules/sort-keys-length/package.json\\nnode_modules/bower/lib/node_modules/sort-keys/package.json\\nnode_modules/bower/lib/node_modules/source-map/package.json\\nnode_modules/bower/lib/node_modules/sshpk/package.json\\nnode_modules/bower/lib/node_modules/string-width/package.json\\nnode_modules/bower/lib/node_modules/string_decoder/package.json\\nnode_modules/bower/lib/node_modules/stringify-object/package.json\\nnode_modules/bower/lib/node_modules/stringstream/package.json\\nnode_modules/bower/lib/node_modules/strip-ansi/package.json\\nnode_modules/bower/lib/node_modules/strip-json-comments/package.json\\nnode_modules/bower/lib/node_modules/tar-fs/node_modules/mkdirp/package.json\\nnode_modules/bower/lib/node_modules/tar-fs/package.json\\nnode_modules/bower/lib/node_modules/tar-stream/node_modules/bl/package.json\\nnode_modules/bower/lib/node_modules/tar-stream/package.json\\nnode_modules/bower/lib/node_modules/throttleit/package.json\\nnode_modules/bower/lib/node_modules/through/package.json\\nnode_modules/bower/lib/node_modules/timed-out/package.json\\nnode_modules/bower/lib/node_modules/tmp/package.json\\nnode_modules/bower/lib/node_modules/touch/node_modules/nopt/package.json\\nnode_modules/bower/lib/node_modules/touch/package.json\\nnode_modules/bower/lib/node_modules/tough-cookie/package.json\\nnode_modules/bower/lib/node_modules/traverse/package.json\\nnode_modules/bower/lib/node_modules/tunnel-agent/package.json\\nnode_modules/bower/lib/node_modules/tweetnacl/package.json\\nnode_modules/bower/lib/node_modules/uglify-js/package.json\\nnode_modules/bower/lib/node_modules/untildify/package.json\\nnode_modules/bower/lib/node_modules/unzip-response/package.json\\nnode_modules/bower/lib/node_modules/update-notifier/package.json\\nnode_modules/bower/lib/node_modules/url-parse-lax/package.json\\nnode_modules/bower/lib/node_modules/user-home/package.json\\nnode_modules/bower/lib/node_modules/util-deprecate/package.json\\nnode_modules/bower/lib/node_modules/uuid/benchmark/package.json\\nnode_modules/bower/lib/node_modules/uuid/package.json\\nnode_modules/bower/lib/node_modules/verror/package.json\\nnode_modules/bower/lib/node_modules/which/package.json\\nnode_modules/bower/lib/node_modules/widest-line/package.json\\nnode_modules/bower/lib/node_modules/wordwrap/package.json\\nnode_modules/bower/lib/node_modules/wrappy/package.json\\nnode_modules/bower/lib/node_modules/write-file-atomic/package.json\\nnode_modules/bower/lib/node_modules/xdg-basedir/package.json\\nnode_modules/bower/lib/node_modules/xtend/package.json\\nnode_modules/bower/package.json\\nnode_modules/bower/packages/bower-config/package.json\\nnode_modules/bower/packages/bower-endpoint-parser/package.json\\nnode_modules/bower/packages/bower-json/package.json\\nnode_modules/bower/packages/bower-logger/package.json\\nnode_modules/bower/packages/bower-registry-client/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/brorand/package.json\\nnode_modules/browser-pack/package.json\\nnode_modules/browser-resolve/package.json\\nnode_modules/browserify-aes/package.json\\nnode_modules/browserify-cipher/package.json\\nnode_modules/browserify-des/package.json\\nnode_modules/browserify-rsa/package.json\\nnode_modules/browserify-sign/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/browserify/package.json\\nnode_modules/browserify/test/pkg_event/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/buffer-xor/package.json\\nnode_modules/buffer/package.json\\nnode_modules/builtin-status-codes/package.json\\nnode_modules/cached-path-relative/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/cipher-base/package.json\\nnode_modules/combine-source-map/node_modules/source-map/package.json\\nnode_modules/combine-source-map/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/constants-browserify/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/create-ecdh/node_modules/bn.js/package.json\\nnode_modules/create-ecdh/package.json\\nnode_modules/create-hash/package.json\\nnode_modules/create-hmac/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/dash-ast/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/defined/package.json\\nnode_modules/deps-sort/package.json\\nnode_modules/des.js/package.json\\nnode_modules/detective/package.json\\nnode_modules/diffie-hellman/node_modules/bn.js/package.json\\nnode_modules/diffie-hellman/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/elliptic/node_modules/bn.js/package.json\\nnode_modules/elliptic/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/esprima/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/events/package.json\\nnode_modules/evp_bytestokey/package.json\\nnode_modules/fast-safe-stringify/package.json\\nnode_modules/for-each/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/generator-function/package.json\\nnode_modules/get-assigned-identifiers/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/glob/package.json\\nnode_modules/gopd/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/hash-base/package.json\\nnode_modules/hash.js/package.json\\nnode_modules/hasown/package.json\\nnode_modules/hmac-drbg/package.json\\nnode_modules/htmlescape/package.json\\nnode_modules/https-browserify/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inline-source-map/node_modules/source-map/package.json\\nnode_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/package.json\\nnode_modules/is-arguments/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/is-generator-function/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/isarray/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/labeled-stream-splicer/package.json\\nnode_modules/lodash.memoize/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/md5.js/package.json\\nnode_modules/miller-rabin/node_modules/bn.js/package.json\\nnode_modules/miller-rabin/package.json\\nnode_modules/minimalistic-assert/package.json\\nnode_modules/minimalistic-crypto-utils/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp-classic/package.json\\nnode_modules/module-deps/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/object.assign/package.json\\nnode_modules/once/package.json\\nnode_modules/os-browserify/package.json\\nnode_modules/pako/package.json\\nnode_modules/parents/package.json\\nnode_modules/parse-asn1/package.json\\nnode_modules/path-browserify/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-platform/package.json\\nnode_modules/pbkdf2/package.json\\nnode_modules/pop-iterate/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process/package.json\\nnode_modules/public-encrypt/node_modules/bn.js/package.json\\nnode_modules/public-encrypt/package.json\\nnode_modules/punycode/package.json\\nnode_modules/q/package.json\\nnode_modules/qs/package.json\\nnode_modules/querystring-es3/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/randomfill/package.json\\nnode_modules/read-only-stream/package.json\\nnode_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/readable-stream/node_modules/string_decoder/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/ripemd160/node_modules/hash-base/package.json\\nnode_modules/ripemd160/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safe-regex-test/package.json\\nnode_modules/semver/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shasum-object/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/side-channel-list/package.json\\nnode_modules/side-channel-map/package.json\\nnode_modules/side-channel-weakmap/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/simple-concat/package.json\\nnode_modules/source-map/package.json\\nnode_modules/stream-browserify/node_modules/readable-stream/package.json\\nnode_modules/stream-browserify/package.json\\nnode_modules/stream-combiner2/package.json\\nnode_modules/stream-http/node_modules/readable-stream/package.json\\nnode_modules/stream-http/package.json\\nnode_modules/stream-splicer/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/subarg/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json\\nnode_modules/syntax-error/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/package.json\\nnode_modules/timers-browserify/package.json\\nnode_modules/to-buffer/node_modules/isarray/package.json\\nnode_modules/to-buffer/package.json\\nnode_modules/tty-browserify/package.json\\nnode_modules/typed-array-buffer/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/umd/package.json\\nnode_modules/undeclared-identifiers/package.json\\nnode_modules/url/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/util/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/weak-map/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/xtend/package.json" } ] }, "components": [ { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/xtend/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "which-typed-array", "version": "1.1.24", "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-typed-array@1.1.24", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/which-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/which-typed-array@1.1.24", "properties": [ { "name": "SrcFile", "value": "node_modules/which-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-typed-array/package.json" } ], "concludedValue": "node_modules/which-typed-array/package.json" } ] } }, { "authors": [ { "name": "Mark Miller " } ], "group": "", "name": "weak-map", "version": "1.0.8", "description": "A WeakMap shim for Node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/weak-map@1.0.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/drses/weak-map.git" } ], "type": "library", "bom-ref": "pkg:npm/weak-map@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/weak-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/weak-map/package.json" } ], "concludedValue": "node_modules/weak-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "vm-browserify", "version": "1.1.2", "description": "vm module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vm-browserify@1.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/vm-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/vm-browserify@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/vm-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vm-browserify/package.json" } ], "concludedValue": "node_modules/vm-browserify/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Joyent (http://www.joyent.com)" } ], "group": "", "name": "util", "version": "0.12.5", "description": "Node.js's util module for all engines", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.12.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/node-util" }, { "type": "vcs", "url": "git://github.com/browserify/node-util" } ], "type": "library", "bom-ref": "pkg:npm/util@0.12.5", "properties": [ { "name": "SrcFile", "value": "node_modules/util/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/package.json" } ], "concludedValue": "node_modules/util/package.json" } ] } }, { "authors": [ { "name": "defunctzombie" } ], "group": "", "name": "url", "version": "0.11.4", "description": "The core `url` packaged standalone for use with Browserify.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url@0.11.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-url.git" } ], "type": "library", "bom-ref": "pkg:npm/url@0.11.4", "properties": [ { "name": "SrcFile", "value": "node_modules/url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/package.json" } ], "concludedValue": "node_modules/url/package.json" } ] } }, { "authors": [ { "name": "Renée Kooi " } ], "group": "", "name": "undeclared-identifiers", "version": "1.1.3", "description": "find undeclared identifiers and property accesses in a javascript file.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undeclared-identifiers@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/goto-bus-stop/undeclared-identifiers" }, { "type": "vcs", "url": "https://github.com/goto-bus-stop/undeclared-identifiers.git" } ], "type": "library", "bom-ref": "pkg:npm/undeclared-identifiers@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/undeclared-identifiers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undeclared-identifiers/package.json" } ], "concludedValue": "node_modules/undeclared-identifiers/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "umd", "version": "3.0.3", "description": "Universal Module Definition for use in automated build systems", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/umd@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/umd.git" } ], "type": "library", "bom-ref": "pkg:npm/umd@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/umd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/umd/package.json" } ], "concludedValue": "node_modules/umd/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "typedarray", "version": "0.0.6", "description": "TypedArray polyfill for old browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedarray@0.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/typedarray" }, { "type": "vcs", "url": "git://github.com/substack/typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/typedarray@0.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typedarray/package.json" } ], "concludedValue": "node_modules/typedarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-buffer", "version": "1.0.3", "description": "Get the ArrayBuffer out of a TypedArray, robustly.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-buffer@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-buffer@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-buffer/package.json" } ], "concludedValue": "node_modules/typed-array-buffer/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tty-browserify", "version": "0.0.1", "description": "the tty module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tty-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/tty-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/tty-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/tty-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tty-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tty-browserify/package.json" } ], "concludedValue": "node_modules/tty-browserify/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "to-buffer", "version": "1.2.2", "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-buffer@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/to-buffer" }, { "type": "vcs", "url": "https://github.com/browserify/to-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/to-buffer@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/to-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-buffer/package.json" } ], "concludedValue": "node_modules/to-buffer/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "2.0.5", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/to-buffer/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-buffer/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/to-buffer/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "J. Ryan Stinnett (http://convolv.es/)" } ], "group": "", "name": "timers-browserify", "version": "1.4.2", "description": "timers module for browserify", "scope": "optional", "purl": "pkg:npm/timers-browserify@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jryans/timers-browserify" }, { "type": "vcs", "url": "git://github.com/jryans/timers-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/timers-browserify@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/timers-browserify/package.json" } ], "concludedValue": "node_modules/timers-browserify/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "2.0.5", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/through/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "syntax-error", "version": "1.4.0", "description": "detect and report syntax errors in source code strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/syntax-error@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-syntax-error" }, { "type": "vcs", "url": "git://github.com/substack/node-syntax-error.git" } ], "type": "library", "bom-ref": "pkg:npm/syntax-error@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/syntax-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/syntax-error/package.json" } ], "concludedValue": "node_modules/syntax-error/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-preserve-symlinks-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-preserve-symlinks-flag/package.json" } ], "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "subarg", "version": "1.0.0", "description": "parse arguments with recursive contexts", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/subarg@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/subarg" }, { "type": "vcs", "url": "git://github.com/substack/subarg.git" } ], "type": "library", "bom-ref": "pkg:npm/subarg@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/subarg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/subarg/package.json" } ], "concludedValue": "node_modules/subarg/package.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.3.0", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-splicer", "version": "2.0.1", "description": "streaming pipeline with a mutable configuration", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-splicer@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/stream-splicer" }, { "type": "vcs", "url": "git://github.com/browserify/stream-splicer.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-splicer@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-splicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-splicer/package.json" } ], "concludedValue": "node_modules/stream-splicer/package.json" } ] } }, { "authors": [ { "name": "John Hiesey" } ], "group": "", "name": "stream-http", "version": "3.2.0", "description": "Streaming http in the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-http@3.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jhiesey/stream-http#readme" }, { "type": "vcs", "url": "git://github.com/jhiesey/stream-http.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-http@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-http/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-http/package.json" } ], "concludedValue": "node_modules/stream-http/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "3.6.2", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@3.6.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@3.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-http/node_modules/readable-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/stream-browserify/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-browserify/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/stream-browserify/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "stream-combiner2", "version": "1.1.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-combiner2@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-combiner2" }, { "type": "vcs", "url": "git://github.com/substack/stream-combiner2.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner2@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-combiner2/package.json" } ], "concludedValue": "node_modules/stream-combiner2/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-browserify", "version": "3.0.0", "description": "the stream module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-browserify@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/stream-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/stream-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-browserify@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-browserify/package.json" } ], "concludedValue": "node_modules/stream-browserify/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.8.0", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "git+ssh://git@github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "escodegen.browser.js", "line": 2410 }, { "location": "escodegen.js", "line": 1972 } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "simple-concat", "version": "1.0.1", "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-concat@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/simple-concat" }, { "type": "vcs", "url": "git://github.com/feross/simple-concat.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-concat@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-concat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-concat/package.json" } ], "concludedValue": "node_modules/simple-concat/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-weakmap", "version": "1.0.2", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-weakmap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-weakmap#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-weakmap.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-weakmap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-weakmap/package.json" } ], "concludedValue": "node_modules/side-channel-weakmap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-map", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a Map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-map@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-map#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-map.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-map@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-map/package.json" } ], "concludedValue": "node_modules/side-channel-map/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-list", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a linked list", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-list@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-list#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-list.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-list@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-list/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-list/package.json" } ], "concludedValue": "node_modules/side-channel-list/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel", "version": "1.1.1", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel/package.json" } ], "concludedValue": "node_modules/side-channel/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shell-quote", "version": "1.10.0", "description": "quote and parse shell commands", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shell-quote@1.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/shell-quote" }, { "type": "vcs", "url": "http://github.com/ljharb/shell-quote.git" } ], "type": "library", "bom-ref": "pkg:npm/shell-quote@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shell-quote/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shell-quote/package.json" } ], "concludedValue": "node_modules/shell-quote/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Renée Kooi " } ], "group": "", "name": "shasum-object", "version": "1.0.1", "description": "get the shasum of a buffer or object", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shasum-object@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/goto-bus-stop/shasum-object" }, { "type": "vcs", "url": "https://github.com/goto-bus-stop/shasum-object.git" } ], "type": "library", "bom-ref": "pkg:npm/shasum-object@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/shasum-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shasum-object/package.json" } ], "concludedValue": "node_modules/shasum-object/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "sha.js", "version": "2.4.12", "description": "Streamable SHA hashes in pure javascript", "scope": "optional", "licenses": [ { "expression": "MIT AND BSD-3-Clause" } ], "purl": "pkg:npm/sha.js@2.4.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/sha.js" }, { "type": "vcs", "url": "git://github.com/crypto-browserify/sha.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sha.js@2.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/package.json" } ], "concludedValue": "node_modules/sha.js/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-length", "version": "1.2.2", "description": "Set a function's length property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-length@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-length#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-length.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-length@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-length/package.json" } ], "concludedValue": "node_modules/set-function-length/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 34 } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "safe-regex-test", "version": "1.1.0", "description": "Give a regex, get a robust predicate function that tests it against a string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-regex-test@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/safe-regex-test#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/safe-regex-test.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-regex-test@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-regex-test/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-regex-test/package.json" } ], "concludedValue": "node_modules/safe-regex-test/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "group": "", "name": "ripemd160", "version": "2.0.3", "description": "Compute ripemd160 of bytes or strings.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ripemd160@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/ripemd160" } ], "type": "library", "bom-ref": "pkg:npm/ripemd160@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/package.json" } ], "concludedValue": "node_modules/ripemd160/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "hash-base", "version": "3.1.2", "description": "abstract base class for hash-streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hash-base@3.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base.git" } ], "type": "library", "bom-ref": "pkg:npm/hash-base@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/hash-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/node_modules/hash-base/package.json" } ], "concludedValue": "node_modules/ripemd160/node_modules/hash-base/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.12", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.12", "externalReferences": [ { "type": "vcs", "url": "ssh://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.12", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "ljharb-monorepo-symlink-test", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid_main", "version": "", "scope": "optional", "purl": "pkg:npm/invalid_main", "type": "library", "bom-ref": "pkg:npm/invalid_main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "false_main", "version": "", "scope": "optional", "purl": "pkg:npm/false_main", "type": "library", "bom-ref": "pkg:npm/false_main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/false_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "scope": "optional", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "group": "", "name": "baz", "version": "", "scope": "optional", "purl": "pkg:npm/baz", "type": "library", "bom-ref": "pkg:npm/baz", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/baz/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/readable-stream/node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "read-only-stream", "version": "2.0.0", "description": "wrap a readable/writable stream to be read-only", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-only-stream@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/read-only-stream" }, { "type": "vcs", "url": "git://github.com/substack/read-only-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/read-only-stream@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-only-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-only-stream/package.json" } ], "concludedValue": "node_modules/read-only-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "randomfill", "version": "1.0.4", "description": "random fill from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randomfill@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randomfill" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/randomfill.git" } ], "type": "library", "bom-ref": "pkg:npm/randomfill@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/randomfill/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randomfill/package.json" } ], "concludedValue": "node_modules/randomfill/package.json" } ] } }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring-es3", "version": "0.2.1", "description": "Node's querystring module for all engines. (ES3 compat fork)", "scope": "optional", "purl": "pkg:npm/querystring-es3@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/mike-spainhower/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring-es3@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring-es3/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring-es3/package.json" } ], "concludedValue": "node_modules/querystring-es3/package.json" } ] } }, { "group": "", "name": "qs", "version": "6.16.0", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.16.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.16.0", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Kris Kowal (https://github.com/kriskowal)" } ], "group": "", "name": "q", "version": "2.0.3", "description": "A library for promises (CommonJS/Promises/A,B,D)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/q@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriskowal/q" }, { "type": "vcs", "url": "git://github.com/kriskowal/q.git" } ], "type": "library", "bom-ref": "pkg:npm/q@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/q/package.json" }, { "name": "ImportedModules", "value": "q" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/q/package.json" } ], "concludedValue": "node_modules/q/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 36 } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.4.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@1.4.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/punycode/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "public-encrypt", "version": "4.0.3", "description": "browserify version of publicEncrypt & privateDecrypt", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/public-encrypt@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/publicEncrypt" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/publicEncrypt.git" } ], "type": "library", "bom-ref": "pkg:npm/public-encrypt@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/public-encrypt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/public-encrypt/package.json" } ], "concludedValue": "node_modules/public-encrypt/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "bn.js", "version": "4.12.5", "description": "Big number implementation in pure javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bn.js@4.12.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/bn.js" } ], "type": "library", "bom-ref": "pkg:npm/bn.js@4.12.5", "properties": [ { "name": "SrcFile", "value": "node_modules/public-encrypt/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/miller-rabin/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/elliptic/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/diffie-hellman/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/create-ecdh/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/asn1.js/node_modules/bn.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1.js/node_modules/bn.js/package.json" } ], "concludedValue": "node_modules/asn1.js/node_modules/bn.js/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.11.10", "description": "process information for node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process@0.11.10", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.11.10", "properties": [ { "name": "SrcFile", "value": "node_modules/process/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process/package.json" } ], "concludedValue": "node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "possible-typed-array-names", "version": "1.1.0", "description": "A simple list of possible Typed Array names.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/possible-typed-array-names@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/possible-typed-array-names#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/possible-typed-array-names.git" } ], "type": "library", "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/possible-typed-array-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/possible-typed-array-names/package.json" } ], "concludedValue": "node_modules/possible-typed-array-names/package.json" } ] } }, { "authors": [ { "name": "Kris Kowal " } ], "group": "", "name": "pop-iterate", "version": "1.0.1", "description": "A polymorphic iterate operator for arrays and other iterables", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pop-iterate@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriskowal/pop-iterate" }, { "type": "vcs", "url": "https://github.com/kriskowal/pop-iterate.git" } ], "type": "library", "bom-ref": "pkg:npm/pop-iterate@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pop-iterate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pop-iterate/package.json" } ], "concludedValue": "node_modules/pop-iterate/package.json" } ] } }, { "authors": [ { "name": "Daniel Cousens" } ], "group": "", "name": "pbkdf2", "version": "3.1.6", "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pbkdf2@3.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/pbkdf2" }, { "type": "vcs", "url": "https://github.com/browserify/pbkdf2.git" } ], "type": "library", "bom-ref": "pkg:npm/pbkdf2@3.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/pbkdf2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pbkdf2/package.json" } ], "concludedValue": "node_modules/pbkdf2/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Timothy J Fontaine (http://atxconsulting.com)" } ], "group": "", "name": "path-platform", "version": "0.11.15", "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-platform@0.11.15", "externalReferences": [ { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform" }, { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform.git" } ], "type": "library", "bom-ref": "pkg:npm/path-platform@0.11.15", "properties": [ { "name": "SrcFile", "value": "node_modules/path-platform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-platform/package.json" } ], "concludedValue": "node_modules/path-platform/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.7", "description": "Node.js path.parse() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "path-browserify", "version": "1.0.1", "description": "the path module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-browserify@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/path-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/path-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/path-browserify@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-browserify/package.json" } ], "concludedValue": "node_modules/path-browserify/package.json" } ] } }, { "group": "", "name": "parse-asn1", "version": "5.1.9", "description": "utility library for parsing asn1 files for use with browserify-sign.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-asn1@5.1.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/crypto-browserify/parse-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-asn1@5.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-asn1/package.json" } ], "concludedValue": "node_modules/parse-asn1/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "parents", "version": "1.0.1", "description": "return all the parent directories for a directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parents@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-parents" }, { "type": "vcs", "url": "git://github.com/substack/node-parents.git" } ], "type": "library", "bom-ref": "pkg:npm/parents@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parents/package.json" } ], "concludedValue": "node_modules/parents/package.json" } ] } }, { "group": "", "name": "pako", "version": "1.0.11", "description": "zlib port to javascript - fast, modularized, with browser support", "scope": "optional", "licenses": [ { "expression": "MIT AND Zlib" } ], "purl": "pkg:npm/pako@1.0.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/pako" } ], "type": "library", "bom-ref": "pkg:npm/pako@1.0.11", "properties": [ { "name": "SrcFile", "value": "node_modules/pako/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pako/package.json" } ], "concludedValue": "node_modules/pako/package.json" } ] } }, { "authors": [ { "name": "CoderPuppy " } ], "group": "", "name": "os-browserify", "version": "0.3.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-browserify@0.3.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/CoderPuppy/os-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/os-browserify@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/os-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-browserify/package.json" } ], "concludedValue": "node_modules/os-browserify/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/once/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object.assign", "version": "4.1.7", "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.assign@4.1.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object.assign.git" } ], "type": "library", "bom-ref": "pkg:npm/object.assign@4.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/object.assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.assign/package.json" } ], "concludedValue": "node_modules/object.assign/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "object-keys", "version": "1.1.1", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.13.4", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/object-inspect" }, { "type": "vcs", "url": "git://github.com/inspect-js/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "module-deps", "version": "6.2.3", "description": "walk the dependency graph to generate json output that can be fed into browser-pack", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/module-deps@6.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/module-deps" }, { "type": "vcs", "url": "git://github.com/browserify/module-deps.git" } ], "type": "library", "bom-ref": "pkg:npm/module-deps@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/package.json" } ], "concludedValue": "node_modules/module-deps/package.json" } ] }, "tags": [ "graph", "json" ] }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "mkdirp-classic", "version": "0.5.3", "description": "Mirror of mkdirp 0.5.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp-classic@0.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/mkdirp-classic" }, { "type": "vcs", "url": "https://github.com/mafintosh/mkdirp-classic.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp-classic@0.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp-classic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp-classic/package.json" } ], "concludedValue": "node_modules/mkdirp-classic/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "minimalistic-crypto-utils", "version": "1.0.1", "description": "Minimalistic tools for JS crypto modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/minimalistic-crypto-utils#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minimalistic-crypto-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimalistic-crypto-utils/package.json" } ], "concludedValue": "node_modules/minimalistic-crypto-utils/package.json" } ] }, "tags": [ "crypto", "tools" ] }, { "group": "", "name": "minimalistic-assert", "version": "1.0.1", "description": "minimalistic-assert ===", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimalistic-assert@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/minimalistic-assert" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/minimalistic-assert.git" } ], "type": "library", "bom-ref": "pkg:npm/minimalistic-assert@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minimalistic-assert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimalistic-assert/package.json" } ], "concludedValue": "node_modules/minimalistic-assert/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "miller-rabin", "version": "4.0.1", "description": "Miller Rabin algorithm for primality test", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/miller-rabin@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/miller-rabin" } ], "type": "library", "bom-ref": "pkg:npm/miller-rabin@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/miller-rabin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/miller-rabin/package.json" } ], "concludedValue": "node_modules/miller-rabin/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "md5.js", "version": "1.3.5", "description": "node style md5 on pure JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/md5.js@1.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/md5.js" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/md5.js.git" } ], "type": "library", "bom-ref": "pkg:npm/md5.js@1.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/md5.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/md5.js/package.json" } ], "concludedValue": "node_modules/md5.js/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "math-intrinsics", "version": "1.1.0", "description": "ES Math-related intrinsics and helpers, robustly cached.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/math-intrinsics#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/math-intrinsics.git" } ], "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/math-intrinsics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/math-intrinsics/package.json" } ], "concludedValue": "node_modules/math-intrinsics/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.memoize", "version": "3.0.4", "description": "The modern build of lodash’s `_.memoize` as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.memoize@3.0.4", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.memoize@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.memoize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.memoize/package.json" } ], "concludedValue": "node_modules/lodash.memoize/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "labeled-stream-splicer", "version": "2.0.2", "description": "stream splicer with labels", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/labeled-stream-splicer@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/labeled-stream-splicer" }, { "type": "vcs", "url": "git://github.com/browserify/labeled-stream-splicer.git" } ], "type": "library", "bom-ref": "pkg:npm/labeled-stream-splicer@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/labeled-stream-splicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/labeled-stream-splicer/package.json" } ], "concludedValue": "node_modules/labeled-stream-splicer/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "1.3.1", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-typed-array", "version": "1.1.15", "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typed-array@1.1.15", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typed-array@1.1.15", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typed-array/package.json" } ], "concludedValue": "node_modules/is-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-regex", "version": "1.2.1", "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regex@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-regex" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regex/package.json" } ], "concludedValue": "node_modules/is-regex/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-generator-function", "version": "1.1.2", "description": "Determine if a function is a native generator function.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-generator-function@1.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-generator-function.git" } ], "type": "library", "bom-ref": "pkg:npm/is-generator-function@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-generator-function/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-generator-function/package.json" } ], "concludedValue": "node_modules/is-generator-function/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-core-module", "version": "2.17.0", "description": "Is this specifier a node.js core module?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-core-module@2.17.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-core-module" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-core-module.git" } ], "type": "library", "bom-ref": "pkg:npm/is-core-module@2.17.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-core-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-core-module/package.json" } ], "concludedValue": "node_modules/is-core-module/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-callable", "version": "1.2.7", "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-callable@1.2.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-callable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/is-callable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-callable/package.json" } ], "concludedValue": "node_modules/is-callable/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "is-buffer", "version": "1.1.6", "description": "Determine if an object is a Buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-buffer@1.1.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/is-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/is-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-buffer/package.json" } ], "concludedValue": "node_modules/is-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-arguments", "version": "1.2.0", "description": "Is this an arguments object? It's a harder question than you think.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arguments@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-arguments" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-arguments.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arguments@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arguments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arguments/package.json" } ], "concludedValue": "node_modules/is-arguments/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "insert-module-globals", "version": "7.2.1", "description": "insert implicit module globals into a module-deps stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/insert-module-globals@7.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/insert-module-globals" }, { "type": "vcs", "url": "git://github.com/browserify/insert-module-globals.git" } ], "type": "library", "bom-ref": "pkg:npm/insert-module-globals@7.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/package.json" } ], "concludedValue": "node_modules/insert-module-globals/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "inline-source-map", "version": "0.6.3", "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inline-source-map@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/inline-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/inline-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/inline-source-map@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inline-source-map/package.json" } ], "concludedValue": "node_modules/inline-source-map/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map" }, { "name": "SrcFile", "value": "node_modules/combine-source-map/node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combine-source-map/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/combine-source-map/node_modules/source-map/package.json" } ], "occurrences": [ { "location": "escodegen.browser.js", "line": 2410 }, { "location": "escodegen.js", "line": 1972 } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/lib/node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/lib/node_modules/inflight/package.json" } ], "concludedValue": "node_modules/bower/lib/node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.2.1", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ieee754@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "https-browserify", "version": "1.0.0", "description": "https module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-browserify@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/https-browserify" }, { "type": "vcs", "url": "git://github.com/substack/https-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/https-browserify@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/https-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-browserify/package.json" } ], "concludedValue": "node_modules/https-browserify/package.json" } ] } }, { "authors": [ { "name": "Andres Suarez " } ], "group": "", "name": "htmlescape", "version": "1.1.1", "description": "Properly escape JSON for usage as an object literal inside of a `