{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:5bd28970-1a51-4f51-a565-9083d027f2c2", "version": 1, "metadata": { "timestamp": "2026-09-26T16:48:39Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "expo-cli", "group": "", "version": "5.1.2", "description": "The command-line tool for creating and publishing Expo apps", "purl": "pkg:npm/expo-cli@5.1.2", "bom-ref": "pkg:npm/expo-cli@5.1.2", "properties": [ { "name": "cdx:npm:bin", "value": "expo, expo-cli" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "start, build, watch, introspect, prepare, clean, preversion, test, test:e2e, test:watch" }, { "name": "cdx:npm:buildScripts", "value": "build, watch, test:watch" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo-cli/tree/main/packages/expo-cli#readme" }, { "type": "vcs", "url": "https://github.com/expo/expo-cli.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@sindresorhus\\n@szmarczak" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/runtime/package.json\\nnode_modules/@sindresorhus/is/package.json\\nnode_modules/@szmarczak/http-timer/package.json\\nnode_modules/cacache/node_modules/minipass/package.json\\nnode_modules/cacache/node_modules/yallist/package.json\\nnode_modules/cacache/package.json\\nnode_modules/cacheable-request/package.json\\nnode_modules/chownr/package.json\\nnode_modules/commander/package.json\\nnode_modules/crypto-random-string/package.json\\nnode_modules/decompress-response/package.json\\nnode_modules/defer-to-connect/package.json\\nnode_modules/del/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/fs-monkey/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/got/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/keyv/package.json\\nnode_modules/lru-cache/node_modules/yallist/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/memfs/package.json\\nnode_modules/mimic-response/package.json\\nnode_modules/minipass/package.json\\nnode_modules/minizlib/node_modules/minipass/package.json\\nnode_modules/minizlib/node_modules/yallist/package.json\\nnode_modules/minizlib/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/normalize-url/package.json\\nnode_modules/npm-package-arg/node_modules/semver/package.json\\nnode_modules/npm-package-arg/package.json\\nnode_modules/p-map/package.json\\nnode_modules/semver/package.json\\nnode_modules/ssri/node_modules/minipass/package.json\\nnode_modules/ssri/node_modules/yallist/package.json\\nnode_modules/ssri/package.json\\nnode_modules/tar/node_modules/minipass/package.json\\nnode_modules/tar/node_modules/yallist/package.json\\nnode_modules/tar/package.json\\nnode_modules/temp-dir/package.json\\nnode_modules/tempy/package.json\\nnode_modules/type-fest/package.json\\nnode_modules/unique-string/package.json\\nnode_modules/universalify/package.json\\nnode_modules/uuid/package.json" } ] }, "components": [ { "group": "", "name": "uuid", "version": "8.3.2", "description": "RFC4122 (v1, v4, and v5) UUIDs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@8.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@8.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "ImportedModules", "value": "uuid,uuid/v1,uuid/v4" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ], "occurrences": [ { "location": "build/commands/export/exportAppAsync.js", "line": 60 }, { "location": "build/credentials/actions/list.js", "line": 54 }, { "location": "build/credentials/views/AndroidKeystore.js", "line": 71 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 6 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 217 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 220 }, { "location": "src/credentials/actions/list.ts", "line": 5 }, { "location": "src/credentials/actions/list.ts", "line": 143 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 7 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 64 } ] } }, { "authors": [ { "name": "Ryan Zimmerman " } ], "group": "", "name": "universalify", "version": "1.0.0", "description": "Make a callback- or promise-based function support both promises and callbacks.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/universalify@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/RyanZim/universalify#readme" }, { "type": "vcs", "url": "git+https://github.com/RyanZim/universalify.git" } ], "type": "library", "bom-ref": "pkg:npm/universalify@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/universalify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/universalify/package.json" } ], "concludedValue": "node_modules/universalify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "unique-string", "version": "2.0.0", "description": "Generate a unique random string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unique-string@2.0.0", "type": "library", "bom-ref": "pkg:npm/unique-string@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unique-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unique-string/package.json" } ], "concludedValue": "node_modules/unique-string/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "0.16.0", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@0.16.0", "type": "library", "bom-ref": "pkg:npm/type-fest@0.16.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "tempy", "version": "0.7.1", "description": "Get a random temporary file or directory path", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tempy@0.7.1", "type": "library", "bom-ref": "pkg:npm/tempy@0.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tempy/package.json" }, { "name": "ImportedModules", "value": "tempy" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tempy/package.json" } ], "concludedValue": "node_modules/tempy/package.json" } ], "occurrences": [ { "location": "build/commands/eject/prebuildAppAsync.js", "line": 9 }, { "location": "build/credentials/utils/validateKeystore.js", "line": 29 }, { "location": "src/commands/eject/prebuildAppAsync.ts", "line": 3 }, { "location": "src/commands/eject/prebuildAppAsync.ts", "line": 51 }, { "location": "src/credentials/utils/validateKeystore.ts", "line": 3 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "temp-dir", "version": "2.0.0", "description": "Get the real path of the system temp directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/temp-dir@2.0.0", "type": "library", "bom-ref": "pkg:npm/temp-dir@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/temp-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/temp-dir/package.json" } ], "concludedValue": "node_modules/temp-dir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "tar", "version": "6.0.5", "description": "tar for node", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@6.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@6.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" }, { "name": "ImportedModules", "value": "tar,ReadEntry,tar/ReadEntry" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ], "occurrences": [ { "location": "build/commands/utils/Tar.js", "line": 29 }, { "location": "build/commands/utils/npm.js", "line": 75 }, { "location": "src/commands/utils/Tar.ts", "line": 3 }, { "location": "src/commands/utils/Tar.ts", "line": 22 }, { "location": "src/commands/utils/createFileTransform.ts", "line": 4 }, { "location": "src/commands/utils/npm.ts", "line": 8 }, { "location": "src/commands/utils/npm.ts", "line": 155 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "4.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/ssri/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/minizlib/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/lru-cache/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/cacache/node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/cacache/node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "3.1.1", "description": "minimal implementation of a PassThrough stream", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@3.1.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/node_modules/minipass/package.json" }, { "name": "ImportedModules", "value": "minipass" }, { "name": "SrcFile", "value": "node_modules/ssri/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minizlib/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/cacache/node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/cacache/node_modules/minipass/package.json" } ], "occurrences": [ { "location": "build/commands/utils/createFileTransform.js", "line": 20 }, { "location": "src/commands/utils/createFileTransform.ts", "line": 2 } ] } }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "ssri", "version": "8.0.1", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ssri@8.0.1", "type": "library", "bom-ref": "pkg:npm/ssri@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ssri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ssri/package.json" } ], "concludedValue": "node_modules/ssri/package.json" } ] } }, { "group": "", "name": "semver", "version": "7.3.2", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.3.2", "type": "library", "bom-ref": "pkg:npm/semver@7.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "build/commands/build/BaseBuilder.js", "line": 39 }, { "location": "build/commands/build/ios/IOSBuilder.js", "line": 39 }, { "location": "build/commands/eject/createNativeProjectsFromTemplateAsync.js", "line": 50 }, { "location": "build/commands/eject/setupWarnings.js", "line": 30 }, { "location": "build/commands/export/exportAppAsync.js", "line": 50 }, { "location": "build/commands/export/mergeAppDistributions.js", "line": 39 }, { "location": "build/commands/info/upgradeAsync.js", "line": 113 }, { "location": "build/commands/utils/CreateApp.js", "line": 76 }, { "location": "build/commands/utils/ProjectUtils.js", "line": 62 }, { "location": "build/commands/utils/validateDependenciesVersions.js", "line": 49 }, { "location": "src/commands/build/BaseBuilder.ts", "line": 4 }, { "location": "src/commands/build/BaseBuilder.ts", "line": 90 }, { "location": "src/commands/build/BaseBuilder.ts", "line": 95 }, { "location": "src/commands/build/ios/IOSBuilder.ts", "line": 4 }, { "location": "src/commands/build/ios/IOSBuilder.ts", "line": 370 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 7 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 169 }, { "location": "src/commands/eject/setupWarnings.ts", "line": 4 }, { "location": "src/commands/eject/setupWarnings.ts", "line": 54 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 5 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 119 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 5 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 81 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 86 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 17 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 58 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 113 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 120 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 182 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 364 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 483 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 690 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 694 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 750 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 751 }, { "location": "src/commands/utils/CreateApp.ts", "line": 7 }, { "location": "src/commands/utils/CreateApp.ts", "line": 128 }, { "location": "src/commands/utils/ProjectUtils.ts", "line": 6 }, { "location": "src/commands/utils/ProjectUtils.ts", "line": 70 }, { "location": "src/commands/utils/ProjectUtils.ts", "line": 71 }, { "location": "src/commands/utils/validateDependenciesVersions.ts", "line": 6 }, { "location": "src/commands/utils/validateDependenciesVersions.ts", "line": 144 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "4.0.0", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-map@4.0.0", "type": "library", "bom-ref": "pkg:npm/p-map@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-map/package.json" } ], "concludedValue": "node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "npm-package-arg", "version": "6.1.0", "description": "Parse the things that can be arguments to `npm install`", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-package-arg@6.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-package-arg" }, { "type": "vcs", "url": "https://github.com/npm/npm-package-arg" } ], "type": "library", "bom-ref": "pkg:npm/npm-package-arg@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-package-arg/package.json" }, { "name": "ImportedModules", "value": "npm-package-arg" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-package-arg/package.json" } ], "concludedValue": "node_modules/npm-package-arg/package.json" } ], "occurrences": [ { "location": "build/commands/initAsync.js", "line": 79 }, { "location": "build/commands/installAsync.js", "line": 39 }, { "location": "src/commands/initAsync.ts", "line": 8 }, { "location": "src/commands/initAsync.ts", "line": 187 }, { "location": "src/commands/installAsync.ts", "line": 4 }, { "location": "src/commands/installAsync.ts", "line": 99 } ] } }, { "group": "", "name": "semver", "version": "5.7.1", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.1", "type": "library", "bom-ref": "pkg:npm/semver@5.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-package-arg/node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-package-arg/node_modules/semver/package.json" } ], "concludedValue": "node_modules/npm-package-arg/node_modules/semver/package.json" } ], "occurrences": [ { "location": "build/commands/build/BaseBuilder.js", "line": 39 }, { "location": "build/commands/build/ios/IOSBuilder.js", "line": 39 }, { "location": "build/commands/eject/createNativeProjectsFromTemplateAsync.js", "line": 50 }, { "location": "build/commands/eject/setupWarnings.js", "line": 30 }, { "location": "build/commands/export/exportAppAsync.js", "line": 50 }, { "location": "build/commands/export/mergeAppDistributions.js", "line": 39 }, { "location": "build/commands/info/upgradeAsync.js", "line": 113 }, { "location": "build/commands/utils/CreateApp.js", "line": 76 }, { "location": "build/commands/utils/ProjectUtils.js", "line": 62 }, { "location": "build/commands/utils/validateDependenciesVersions.js", "line": 49 }, { "location": "src/commands/build/BaseBuilder.ts", "line": 4 }, { "location": "src/commands/build/BaseBuilder.ts", "line": 90 }, { "location": "src/commands/build/BaseBuilder.ts", "line": 95 }, { "location": "src/commands/build/ios/IOSBuilder.ts", "line": 4 }, { "location": "src/commands/build/ios/IOSBuilder.ts", "line": 370 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 7 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 169 }, { "location": "src/commands/eject/setupWarnings.ts", "line": 4 }, { "location": "src/commands/eject/setupWarnings.ts", "line": 54 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 5 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 119 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 5 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 81 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 86 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 17 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 58 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 113 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 120 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 182 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 364 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 483 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 690 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 694 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 750 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 751 }, { "location": "src/commands/utils/CreateApp.ts", "line": 7 }, { "location": "src/commands/utils/CreateApp.ts", "line": 128 }, { "location": "src/commands/utils/ProjectUtils.ts", "line": 6 }, { "location": "src/commands/utils/ProjectUtils.ts", "line": 70 }, { "location": "src/commands/utils/ProjectUtils.ts", "line": 71 }, { "location": "src/commands/utils/validateDependenciesVersions.ts", "line": 6 }, { "location": "src/commands/utils/validateDependenciesVersions.ts", "line": 144 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "normalize-url", "version": "4.5.0", "description": "Normalize a URL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-url@4.5.0", "type": "library", "bom-ref": "pkg:npm/normalize-url@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-url/package.json" } ], "concludedValue": "node_modules/normalize-url/package.json" } ] } }, { "group": "", "name": "mkdirp", "version": "1.0.4", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "2.1.2", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/minizlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minizlib/package.json" } ], "concludedValue": "node_modules/minizlib/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "2.3.5", "description": "minimal implementation of a PassThrough stream", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@2.3.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@2.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "ImportedModules", "value": "minipass" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ], "occurrences": [ { "location": "build/commands/utils/createFileTransform.js", "line": 20 }, { "location": "src/commands/utils/createFileTransform.ts", "line": 2 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "3.1.0", "description": "Mimic a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@3.1.0", "type": "library", "bom-ref": "pkg:npm/mimic-response@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/mimic-response/package.json" } ] } }, { "group": "", "name": "memfs", "version": "3.2.0", "description": "In-memory file-system with Node's fs API.", "scope": "optional", "purl": "pkg:npm/memfs@3.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/streamich/memfs.git" } ], "type": "library", "bom-ref": "pkg:npm/memfs@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/memfs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/memfs/package.json" } ], "concludedValue": "node_modules/memfs/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "6.0.0", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@6.0.0", "type": "library", "bom-ref": "pkg:npm/lru-cache@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "keyv", "version": "4.0.1", "description": "Simple key-value storage with support for multiple backends", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/keyv@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lukechilds/keyv" }, { "type": "vcs", "url": "git+https://github.com/lukechilds/keyv.git" } ], "type": "library", "bom-ref": "pkg:npm/keyv@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/keyv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/keyv/package.json" } ], "concludedValue": "node_modules/keyv/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "jsonfile", "version": "6.0.1", "description": "Easily read/write JSON files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonfile@6.0.1", "type": "library", "bom-ref": "pkg:npm/jsonfile@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonfile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonfile/package.json" } ], "concludedValue": "node_modules/jsonfile/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Dominic Tarr (http://dominictarr.com)" } ], "group": "", "name": "json-buffer", "version": "3.0.1", "description": "JSON parse & stringify that supports binary via bops & base64", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-buffer@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/json-buffer" }, { "type": "vcs", "url": "git://github.com/dominictarr/json-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/json-buffer@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-buffer/package.json" } ], "concludedValue": "node_modules/json-buffer/package.json" } ] }, "tags": [ "binary", "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "2.0.0", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@2.0.0", "type": "library", "bom-ref": "pkg:npm/is-stream@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "3.0.2", "description": "Check if a path is inside another path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-path-inside@3.0.2", "type": "library", "bom-ref": "pkg:npm/is-path-inside@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ] } }, { "group": "", "name": "got", "version": "11.8.2", "description": "Human-friendly and powerful HTTP request library for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/got@11.8.2", "type": "library", "bom-ref": "pkg:npm/got@11.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/got/package.json" }, { "name": "ImportedModules", "value": "got,Progress,got/Progress" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/got/package.json" } ], "concludedValue": "node_modules/got/package.json" } ], "occurrences": [ { "location": "build/commands/utils/Tar.js", "line": 9 }, { "location": "src/commands/utils/Tar.ts", "line": 1 }, { "location": "src/commands/utils/Tar.ts", "line": 20 }, { "location": "src/commands/utils/progress.ts", "line": 1 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "5.1.0", "description": "Get a stream as a string, buffer, or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@5.1.0", "type": "library", "bom-ref": "pkg:npm/get-stream@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "fs-monkey", "version": "1.0.1", "description": "Monkey patches for file system related things.", "scope": "optional", "purl": "pkg:npm/fs-monkey@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/streamich/fs-monkey.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-monkey@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-monkey/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-monkey/package.json" } ], "concludedValue": "node_modules/fs-monkey/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "9.0.0", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "ImportedModules", "value": "fs-extra,ensureDir,fs-extra/ensureDir,stat,fs-extra/stat" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ], "occurrences": [ { "location": "build/appleApi/resolveCredentials.js", "line": 31 }, { "location": "build/commands/build/ios/utils/image.js", "line": 19 }, { "location": "build/commands/eject/Github.js", "line": 19 }, { "location": "build/commands/eject/clearNativeFolder.js", "line": 33 }, { "location": "build/commands/eject/createNativeProjectsFromTemplateAsync.js", "line": 30 }, { "location": "build/commands/eject/customizeAsync.js", "line": 49 }, { "location": "build/commands/eject/installNodeDependenciesAsync.js", "line": 19 }, { "location": "build/commands/eject/updatePackageJson.js", "line": 45 }, { "location": "build/commands/export/exportAppAsync.js", "line": 20 }, { "location": "build/commands/export/exportAsync.js", "line": 32 }, { "location": "build/commands/export/mergeAppDistributions.js", "line": 19 }, { "location": "build/commands/export/writeContents.js", "line": 35 }, { "location": "build/commands/fetch/fetchAndroidHashesAsync.js", "line": 9 }, { "location": "build/commands/fetch/fetchAndroidUploadCertAsync.js", "line": 9 }, { "location": "build/commands/fetch/fetchIosCertsAsync.js", "line": 19 }, { "location": "build/commands/fetch/utils.js", "line": 30 }, { "location": "build/commands/initAsync.js", "line": 69 }, { "location": "build/commands/run/ios/Podfile.js", "line": 40 }, { "location": "build/commands/run/ios/XcodeBuild.js", "line": 53 }, { "location": "build/commands/run/ios/developmentCodeSigning.js", "line": 40 }, { "location": "build/commands/run/ios/installOnDeviceAsync.js", "line": 30 }, { "location": "build/commands/run/ios/runIos.js", "line": 29 }, { "location": "build/commands/run/utils/binaryPlist.js", "line": 30 }, { "location": "build/commands/utils/CreateApp.js", "line": 36 }, { "location": "build/commands/utils/GitIgnore.js", "line": 25 }, { "location": "build/commands/utils/npm.js", "line": 35 }, { "location": "build/commands/utils/typescript/ensureTypeScriptSetup.js", "line": 50 }, { "location": "build/commands/utils/typescript/resolveModules.js", "line": 13 }, { "location": "build/credentials/actions/list.js", "line": 24 }, { "location": "build/credentials/actions/promptForCredentials.js", "line": 10 }, { "location": "build/credentials/credentialsJson/read.js", "line": 13 }, { "location": "build/credentials/credentialsJson/update.js", "line": 10 }, { "location": "build/credentials/views/AndroidKeystore.js", "line": 31 }, { "location": "build/credentials/views/IosDistCert.js", "line": 32 }, { "location": "build/credentials/views/IosProvisioningProfile.js", "line": 44 }, { "location": "build/credentials/views/IosPushCredentials.js", "line": 22 }, { "location": "src/appleApi/resolveCredentials.ts", "line": 3 }, { "location": "src/appleApi/resolveCredentials.ts", "line": 125 }, { "location": "src/commands/build/ios/utils/image.ts", "line": 2 }, { "location": "src/commands/build/ios/utils/image.ts", "line": 17 }, { "location": "src/commands/eject/Github.ts", "line": 2 }, { "location": "src/commands/eject/Github.ts", "line": 85 }, { "location": "src/commands/eject/clearNativeFolder.ts", "line": 3 }, { "location": "src/commands/eject/clearNativeFolder.ts", "line": 12 }, { "location": "src/commands/eject/clearNativeFolder.ts", "line": 18 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 5 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 23 }, { "location": "src/commands/eject/createNativeProjectsFromTemplateAsync.ts", "line": 183 }, { "location": "src/commands/eject/customizeAsync.ts", "line": 5 }, { "location": "src/commands/eject/customizeAsync.ts", "line": 66 }, { "location": "src/commands/eject/customizeAsync.ts", "line": 83 }, { "location": "src/commands/eject/customizeAsync.ts", "line": 84 }, { "location": "src/commands/eject/customizeAsync.ts", "line": 104 }, { "location": "src/commands/eject/customizeAsync.ts", "line": 115 }, { "location": "src/commands/eject/installNodeDependenciesAsync.ts", "line": 2 }, { "location": "src/commands/eject/installNodeDependenciesAsync.ts", "line": 25 }, { "location": "src/commands/eject/updatePackageJson.ts", "line": 4 }, { "location": "src/commands/eject/updatePackageJson.ts", "line": 45 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 2 }, { "location": "src/commands/export/exportAppAsync.ts", "line": 75 }, { "location": "src/commands/export/exportAsync.ts", "line": 4 }, { "location": "src/commands/export/exportAsync.ts", "line": 141 }, { "location": "src/commands/export/exportAsync.ts", "line": 142 }, { "location": "src/commands/export/exportAsync.ts", "line": 153 }, { "location": "src/commands/export/exportAsync.ts", "line": 173 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 3 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 25 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 27 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 41 }, { "location": "src/commands/export/mergeAppDistributions.ts", "line": 47 }, { "location": "src/commands/export/writeContents.ts", "line": 5 }, { "location": "src/commands/export/writeContents.ts", "line": 21 }, { "location": "src/commands/fetch/fetchAndroidHashesAsync.ts", "line": 1 }, { "location": "src/commands/fetch/fetchAndroidHashesAsync.ts", "line": 41 }, { "location": "src/commands/fetch/fetchAndroidUploadCertAsync.ts", "line": 1 }, { "location": "src/commands/fetch/fetchAndroidUploadCertAsync.ts", "line": 47 }, { "location": "src/commands/fetch/fetchIosCertsAsync.ts", "line": 2 }, { "location": "src/commands/fetch/fetchIosCertsAsync.ts", "line": 41 }, { "location": "src/commands/fetch/fetchIosCertsAsync.ts", "line": 45 }, { "location": "src/commands/fetch/fetchIosCertsAsync.ts", "line": 52 }, { "location": "src/commands/fetch/fetchIosCertsAsync.ts", "line": 57 }, { "location": "src/commands/fetch/fetchIosCertsAsync.ts", "line": 67 }, { "location": "src/commands/fetch/utils.ts", "line": 3 }, { "location": "src/commands/fetch/utils.ts", "line": 21 }, { "location": "src/commands/fetch/utils.ts", "line": 23 }, { "location": "src/commands/fetch/utils.ts", "line": 29 }, { "location": "src/commands/initAsync.ts", "line": 7 }, { "location": "src/commands/initAsync.ts", "line": 152 }, { "location": "src/commands/initAsync.ts", "line": 301 }, { "location": "src/commands/initAsync.ts", "line": 555 }, { "location": "src/commands/initAsync.ts", "line": 558 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 4 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 25 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 51 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 58 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 63 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 68 }, { "location": "src/commands/run/ios/Podfile.ts", "line": 107 }, { "location": "src/commands/run/ios/XcodeBuild.ts", "line": 5 }, { "location": "src/commands/run/ios/XcodeBuild.ts", "line": 106 }, { "location": "src/commands/run/ios/XcodeBuild.ts", "line": 110 }, { "location": "src/commands/run/ios/XcodeBuild.ts", "line": 318 }, { "location": "src/commands/run/ios/XcodeBuild.ts", "line": 319 }, { "location": "src/commands/run/ios/XcodeBuild.ts", "line": 325 }, { "location": "src/commands/run/ios/developmentCodeSigning.ts", "line": 4 }, { "location": "src/commands/run/ios/developmentCodeSigning.ts", "line": 115 }, { "location": "src/commands/run/ios/installOnDeviceAsync.ts", "line": 3 }, { "location": "src/commands/run/ios/installOnDeviceAsync.ts", "line": 23 }, { "location": "src/commands/run/ios/runIos.ts", "line": 3 }, { "location": "src/commands/run/ios/runIos.ts", "line": 44 }, { "location": "src/commands/run/utils/binaryPlist.ts", "line": 4 }, { "location": "src/commands/run/utils/binaryPlist.ts", "line": 16 }, { "location": "src/commands/utils/CreateApp.ts", "line": 3 }, { "location": "src/commands/utils/CreateApp.ts", "line": 54 }, { "location": "src/commands/utils/CreateApp.ts", "line": 80 }, { "location": "src/commands/utils/CreateApp.ts", "line": 132 }, { "location": "src/commands/utils/CreateApp.ts", "line": 145 }, { "location": "src/commands/utils/GitIgnore.ts", "line": 2 }, { "location": "src/commands/utils/GitIgnore.ts", "line": 19 }, { "location": "src/commands/utils/GitIgnore.ts", "line": 25 }, { "location": "src/commands/utils/GitIgnore.ts", "line": 30 }, { "location": "src/commands/utils/GitIgnore.ts", "line": 31 }, { "location": "src/commands/utils/GitIgnore.ts", "line": 35 }, { "location": "src/commands/utils/npm.ts", "line": 4 }, { "location": "src/commands/utils/npm.ts", "line": 114 }, { "location": "src/commands/utils/npm.ts", "line": 151 }, { "location": "src/commands/utils/typescript/ensureTypeScriptSetup.ts", "line": 5 }, { "location": "src/commands/utils/typescript/ensureTypeScriptSetup.ts", "line": 54 }, { "location": "src/commands/utils/typescript/resolveModules.ts", "line": 1 }, { "location": "src/commands/utils/typescript/resolveModules.ts", "line": 8 }, { "location": "src/credentials/actions/list.ts", "line": 2 }, { "location": "src/credentials/actions/list.ts", "line": 149 }, { "location": "src/credentials/actions/list.ts", "line": 167 }, { "location": "src/credentials/actions/promptForCredentials.ts", "line": 1 }, { "location": "src/credentials/actions/promptForCredentials.ts", "line": 123 }, { "location": "src/credentials/credentialsJson/read.ts", "line": 1 }, { "location": "src/credentials/credentialsJson/read.ts", "line": 62 }, { "location": "src/credentials/credentialsJson/read.ts", "line": 73 }, { "location": "src/credentials/credentialsJson/read.ts", "line": 87 }, { "location": "src/credentials/credentialsJson/read.ts", "line": 92 }, { "location": "src/credentials/credentialsJson/read.ts", "line": 130 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 1 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 12 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 14 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 57 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 75 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 77 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 143 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 163 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 164 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 167 }, { "location": "src/credentials/credentialsJson/update.ts", "line": 168 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 3 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 67 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 76 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 84 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 205 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 239 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 269 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 271 }, { "location": "src/credentials/views/AndroidKeystore.ts", "line": 277 }, { "location": "src/credentials/views/IosDistCert.ts", "line": 3 }, { "location": "src/credentials/views/IosDistCert.ts", "line": 610 }, { "location": "src/credentials/views/IosProvisioningProfile.ts", "line": 4 }, { "location": "src/credentials/views/IosProvisioningProfile.ts", "line": 401 }, { "location": "src/credentials/views/IosPushCredentials.ts", "line": 2 }, { "location": "src/credentials/views/IosPushCredentials.ts", "line": 621 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "del", "version": "6.0.0", "description": "Delete files and directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/del@6.0.0", "type": "library", "bom-ref": "pkg:npm/del@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/del/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/del/package.json" } ], "concludedValue": "node_modules/del/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "defer-to-connect", "version": "2.0.0", "description": "The safe way to handle the `connect` socket event", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defer-to-connect@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/defer-to-connect#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/defer-to-connect.git" } ], "type": "library", "bom-ref": "pkg:npm/defer-to-connect@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/defer-to-connect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defer-to-connect/package.json" } ], "concludedValue": "node_modules/defer-to-connect/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "decompress-response", "version": "6.0.0", "description": "Decompress a HTTP response if needed", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decompress-response@6.0.0", "type": "library", "bom-ref": "pkg:npm/decompress-response@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-response/package.json" } ], "concludedValue": "node_modules/decompress-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "crypto-random-string", "version": "2.0.0", "description": "Generate a cryptographically strong random string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crypto-random-string@2.0.0", "type": "library", "bom-ref": "pkg:npm/crypto-random-string@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/crypto-random-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypto-random-string/package.json" } ], "concludedValue": "node_modules/crypto-random-string/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.17.1", "description": "the complete solution for node.js command-line programs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.17.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.17.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "ImportedModules", "value": "commander,Command,commander/Command,Option,commander/Option" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ], "occurrences": [ { "location": "build/commands/auth/accounts.js", "line": 44 }, { "location": "build/commands/build/buildAndroidAsync.js", "line": 9 }, { "location": "build/commands/build/buildIosAsync.js", "line": 9 }, { "location": "build/commands/build/utils.js", "line": 23 }, { "location": "build/commands/export/exportAsync.js", "line": 12 }, { "location": "build/commands/info/upgradeAsync.js", "line": 53 }, { "location": "build/commands/initAsync.js", "line": 59 }, { "location": "build/commands/run/ios/IOSDeploy.js", "line": 41 }, { "location": "build/commands/run/ios/developmentCodeSigning.js", "line": 30 }, { "location": "build/commands/run/ios/installOnDeviceAsync.js", "line": 20 }, { "location": "build/commands/utils/deprecatedExtensionWarnings.js", "line": 19 }, { "location": "build/commands/utils/environment.js", "line": 9 }, { "location": "build/commands/utils/maybeBailOnGitStatusAsync.js", "line": 9 }, { "location": "build/commands/utils/typescript/ensureTypeScriptSetup.js", "line": 40 }, { "location": "build/commands/utils/web/ensureWebSetup.js", "line": 42 }, { "location": "build/exp.js", "line": 52 }, { "location": "build/log.js", "line": 19 }, { "location": "build/utils/ora.js", "line": 20 }, { "location": "build/utils/prompts.js", "line": 20 }, { "location": "scripts/introspect.ts", "line": 3 }, { "location": "scripts/introspect.ts", "line": 64 }, { "location": "src/commands/auth/accounts.ts", "line": 4 }, { "location": "src/commands/auth/accounts.ts", "line": 51 }, { "location": "src/commands/auth/login.ts", "line": 1 }, { "location": "src/commands/auth/logout.ts", "line": 1 }, { "location": "src/commands/auth/register.ts", "line": 1 }, { "location": "src/commands/auth/whoami.ts", "line": 1 }, { "location": "src/commands/build/buildAndroidAsync.ts", "line": 1 }, { "location": "src/commands/build/buildIosAsync.ts", "line": 1 }, { "location": "src/commands/build/index.ts", "line": 2 }, { "location": "src/commands/build/utils.ts", "line": 2 }, { "location": "src/commands/client/index.ts", "line": 2 }, { "location": "src/commands/credentials.ts", "line": 1 }, { "location": "src/commands/eject/customize.ts", "line": 1 }, { "location": "src/commands/eject/eject.ts", "line": 2 }, { "location": "src/commands/eject/prebuild.ts", "line": 2 }, { "location": "src/commands/expokit/bundle-assets.ts", "line": 1 }, { "location": "src/commands/expokit/prepare-detached-build.ts", "line": 1 }, { "location": "src/commands/export/export.ts", "line": 1 }, { "location": "src/commands/export/exportAsync.ts", "line": 2 }, { "location": "src/commands/fetch/index.ts", "line": 1 }, { "location": "src/commands/index.ts", "line": 1 }, { "location": "src/commands/info/diagnostics.ts", "line": 1 }, { "location": "src/commands/info/doctor/index.ts", "line": 1 }, { "location": "src/commands/info/upgrade.ts", "line": 1 }, { "location": "src/commands/info/upgradeAsync.ts", "line": 11 }, { "location": "src/commands/init.ts", "line": 1 }, { "location": "src/commands/initAsync.ts", "line": 6 }, { "location": "src/commands/initAsync.ts", "line": 138 }, { "location": "src/commands/initAsync.ts", "line": 140 }, { "location": "src/commands/install.ts", "line": 1 }, { "location": "src/commands/publish/publish.ts", "line": 1 }, { "location": "src/commands/push.ts", "line": 1 }, { "location": "src/commands/run/index.ts", "line": 1 }, { "location": "src/commands/run/ios/IOSDeploy.ts", "line": 4 }, { "location": "src/commands/run/ios/developmentCodeSigning.ts", "line": 3 }, { "location": "src/commands/run/ios/installOnDeviceAsync.ts", "line": 2 }, { "location": "src/commands/send.ts", "line": 1 }, { "location": "src/commands/upload.ts", "line": 2 }, { "location": "src/commands/url/urlAsync.ts", "line": 2 }, { "location": "src/commands/url.ts", "line": 1 }, { "location": "src/commands/utils/applyAsyncAction.ts", "line": 2 }, { "location": "src/commands/utils/deprecatedExtensionWarnings.ts", "line": 2 }, { "location": "src/commands/utils/environment.ts", "line": 1 }, { "location": "src/commands/utils/maybeBailOnGitStatusAsync.ts", "line": 1 }, { "location": "src/commands/utils/typescript/ensureTypeScriptSetup.ts", "line": 4 }, { "location": "src/commands/utils/urlOpts.ts", "line": 1 }, { "location": "src/commands/utils/web/ensureWebSetup.ts", "line": 10 }, { "location": "src/commands/webhooks.ts", "line": 1 }, { "location": "src/exp.ts", "line": 5 }, { "location": "src/exp.ts", "line": 322 }, { "location": "src/exp.ts", "line": 701 }, { "location": "src/exp.ts", "line": 702 }, { "location": "src/exp.ts", "line": 711 }, { "location": "src/exp.ts", "line": 716 }, { "location": "src/exp.ts", "line": 734 }, { "location": "src/exp.ts", "line": 738 }, { "location": "src/log.ts", "line": 2 }, { "location": "src/utils/ora.ts", "line": 2 }, { "location": "src/utils/prompts.ts", "line": 1 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "2.0.0", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@2.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chownr/package.json" } ], "concludedValue": "node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "cacheable-request", "version": "7.0.1", "description": "Wrap native HTTP requests with RFC compliant cache support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacheable-request@7.0.1", "type": "library", "bom-ref": "pkg:npm/cacheable-request@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cacheable-request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacheable-request/package.json" } ], "concludedValue": "node_modules/cacheable-request/package.json" } ] } }, { "group": "", "name": "cacache", "version": "15.3.0", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacache@15.3.0", "type": "library", "bom-ref": "pkg:npm/cacache@15.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/package.json" }, { "name": "ImportedModules", "value": "cacache,CacheObject,cacache/CacheObject" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/package.json" } ], "concludedValue": "node_modules/cacache/package.json" } ], "occurrences": [ { "location": "build/commands/utils/fetch-cache/FileSystemCache.js", "line": 9 }, { "location": "src/commands/utils/fetch-cache/FileSystemCache.ts", "line": 1 }, { "location": "src/commands/utils/fetch-cache/FileSystemCache.ts", "line": 77 }, { "location": "src/commands/utils/fetch-cache/response.ts", "line": 1 } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "@szmarczak", "name": "http-timer", "version": "4.0.5", "description": "Timings for HTTP requests", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40szmarczak/http-timer@4.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/http-timer#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/http-timer.git" } ], "type": "library", "bom-ref": "pkg:npm/@szmarczak/http-timer@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@szmarczak/http-timer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@szmarczak/http-timer/package.json" } ], "concludedValue": "node_modules/@szmarczak/http-timer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "is", "version": "4.0.1", "description": "Type check values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/is@4.0.1", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/is@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/is/package.json" } ], "concludedValue": "node_modules/@sindresorhus/is/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "runtime", "version": "7.9.0", "description": "babel's modular runtime helpers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/runtime@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/docs/en/next/babel-runtime" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/runtime@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/runtime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/runtime/package.json" } ], "concludedValue": "node_modules/@babel/runtime/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/expo-cli@5.1.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-26T16:48:39Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, September 26, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'expo-cli' with version '5.1.2'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 48 source files." } ] }