{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ca99dbd4-85ec-4dfd-8396-14f2e95601f4", "version": 1, "metadata": { "timestamp": "2026-09-25T14:40:50Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "metro-config", "group": "@expo", "version": "56.0.16", "description": "A Metro config for running React Native projects with the Metro bundler", "purl": "pkg:npm/%40expo/metro-config@56.0.16", "bom-ref": "pkg:npm/@expo/metro-config@56.0.16", "properties": [ { "name": "cdx:npm:scripts", "value": "build, clean, lint, prepublishOnly, test, typecheck, watch" }, { "name": "cdx:npm:buildScripts", "value": "build, watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/@expo/metro-config#readme" }, { "type": "vcs", "url": "https://github.com/expo/expo.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@expo\\n@jridgewell\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/core/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@expo/config/package.json\\nnode_modules/@expo/env/package.json\\nnode_modules/@expo/json-file/package.json\\nnode_modules/@expo/metro/package.json\\nnode_modules/@expo/require-utils/package.json\\nnode_modules/@expo/spawn-async/package.json\\nnode_modules/@jridgewell/gen-mapping/package.json\\nnode_modules/@jridgewell/remapping/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@types/babel__code-frame/package.json\\nnode_modules/@types/babel__core/package.json\\nnode_modules/@types/babel__generator/package.json\\nnode_modules/@types/getenv/package.json\\nnode_modules/@types/picomatch/package.json\\nnode_modules/browserslist/package.json\\nnode_modules/chalk/package.json\\nnode_modules/debug/package.json\\nnode_modules/dedent/package.json\\nnode_modules/expo-module-scripts/package.json\\nnode_modules/expo/package.json\\nnode_modules/getenv/package.json\\nnode_modules/glob/package.json\\nnode_modules/hermes-parser/package.json\\nnode_modules/jsc-safe-url/package.json\\nnode_modules/lightningcss/package.json\\nnode_modules/metro-minify-terser/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/postcss/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/sass/package.json" } ] }, "components": [ { "authors": [ { "name": "Natalie Weizenbaum (https://github.com/nex3)" } ], "group": "", "name": "sass", "version": "1.98.0", "description": "A pure JavaScript implementation of Sass.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sass@1.98.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sass/dart-sass" }, { "type": "vcs", "url": "https://github.com/sass/dart-sass" } ], "type": "library", "bom-ref": "pkg:npm/sass@1.98.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sass/package.json" } ], "concludedValue": "node_modules/sass/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "5.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@5.0.0", "type": "library", "bom-ref": "pkg:npm/resolve-from@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-from/package.json" }, { "name": "ImportedModules", "value": "resolve-from" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/resolve-from/package.json" } ], "occurrences": [ { "location": "build/serializer/exportHermes.js", "line": 13 }, { "location": "build/transform-worker/postcss.js", "line": 19 }, { "location": "build/transform-worker/sass.js", "line": 8 }, { "location": "build/utils/getPkgVersion.js", "line": 8 }, { "location": "src/serializer/exportHermes.ts", "line": 7 }, { "location": "src/serializer/exportHermes.ts", "line": 16 }, { "location": "src/serializer/exportHermes.ts", "line": 18 }, { "location": "src/transform-worker/postcss.ts", "line": 11 }, { "location": "src/transform-worker/postcss.ts", "line": 125 }, { "location": "src/transform-worker/postcss.ts", "line": 140 }, { "location": "src/transform-worker/postcss.ts", "line": 155 }, { "location": "src/transform-worker/postcss.ts", "line": 175 }, { "location": "src/transform-worker/sass.ts", "line": 1 }, { "location": "src/transform-worker/sass.ts", "line": 8 }, { "location": "src/utils/getPkgVersion.ts", "line": 2 }, { "location": "src/utils/getPkgVersion.ts", "line": 7 } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "postcss", "version": "8.5.14", "description": "Tool for transforming styles with JS plugins", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss@8.5.14", "externalReferences": [ { "type": "website", "url": "https://postcss.org/" } ], "type": "library", "bom-ref": "pkg:npm/postcss@8.5.14", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/package.json" }, { "name": "ImportedModules", "value": "postcss,AcceptedPlugin,postcss/AcceptedPlugin,ProcessOptions,postcss/ProcessOptions,Processor,postcss/Processor" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/package.json" } ], "concludedValue": "node_modules/postcss/package.json" } ], "occurrences": [ { "location": "build/transform-worker/postcss.js", "line": 37 }, { "location": "src/transform-worker/postcss.ts", "line": 10 }, { "location": "src/transform-worker/postcss.ts", "line": 51 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.4", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "ImportedModules", "value": "picomatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ], "occurrences": [ { "location": "build/serializer/sideEffects.js", "line": 12 }, { "location": "src/serializer/sideEffects.ts", "line": 16 }, { "location": "src/serializer/sideEffects.ts", "line": 115 } ] } }, { "group": "", "name": "metro-minify-terser", "version": "0.84.4", "description": "🚇 Minifier for Metro based on Terser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/metro-minify-terser@0.84.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/facebook/metro.git" } ], "type": "library", "bom-ref": "pkg:npm/metro-minify-terser@0.84.4", "properties": [ { "name": "SrcFile", "value": "node_modules/metro-minify-terser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/metro-minify-terser/package.json" } ], "concludedValue": "node_modules/metro-minify-terser/package.json" } ] } }, { "group": "", "name": "lightningcss", "version": "1.32.0", "description": "A CSS parser, transformer, and minifier written in Rust", "scope": "required", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lightningcss@1.32.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/parcel-bundler/lightningcss.git" } ], "type": "library", "bom-ref": "pkg:npm/lightningcss@1.32.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lightningcss/package.json" }, { "name": "ImportedModules", "value": "lightningcss,TransformResult,lightningcss/TransformResult,Warning,lightningcss/Warning" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lightningcss/package.json" } ], "concludedValue": "node_modules/lightningcss/package.json" } ], "occurrences": [ { "location": "build/transform-worker/browserslist.js", "line": 16 }, { "location": "build/transform-worker/css-modules.js", "line": 16 }, { "location": "build/transform-worker/transform-worker.js", "line": 248 }, { "location": "src/transform-worker/browserslist.ts", "line": 19 }, { "location": "src/transform-worker/css-modules.ts", "line": 2 }, { "location": "src/transform-worker/css-modules.ts", "line": 26 }, { "location": "src/transform-worker/transform-worker.ts", "line": 294 } ] } }, { "authors": [ { "name": "Rob Hogan " } ], "group": "", "name": "jsc-safe-url", "version": "0.2.4", "description": "Utility functions for converting to and from URLs that encode query string data into URL paths", "scope": "required", "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsc-safe-url@0.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/robhogan/jsc-safe-url#readme" }, { "type": "vcs", "url": "git+https://github.com/robhogan/jsc-safe-url.git" } ], "type": "library", "bom-ref": "pkg:npm/jsc-safe-url@0.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/jsc-safe-url/package.json" }, { "name": "ImportedModules", "value": "jsc-safe-url,isJscSafeUrl,jsc-safe-url/isJscSafeUrl,toNormalUrl,jsc-safe-url/toNormalUrl" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsc-safe-url/package.json" } ], "concludedValue": "node_modules/jsc-safe-url/package.json" } ], "occurrences": [ { "location": "build/serializer/fork/baseJSBundle.js", "line": 23 }, { "location": "build/serializer/fork/hmrJSBundle.js", "line": 17 }, { "location": "build/serializer/fork/js.js", "line": 24 }, { "location": "build/serializer/withExpoSerializers.js", "line": 11 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 21 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 67 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 68 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 15 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 63 }, { "location": "src/serializer/fork/js.ts", "line": 17 }, { "location": "src/serializer/fork/js.ts", "line": 104 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 12 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 218 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 219 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 330 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 331 } ] }, "tags": [ "encode" ] }, { "group": "", "name": "hermes-parser", "version": "0.33.3", "description": "A JavaScript parser built from the Hermes engine", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hermes-parser@0.33.3", "type": "library", "bom-ref": "pkg:npm/hermes-parser@0.33.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hermes-parser/package.json" }, { "name": "ImportedModules", "value": "hermes-parser" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hermes-parser/package.json" } ], "concludedValue": "node_modules/hermes-parser/package.json" } ], "occurrences": [ { "location": "build/transformSync.js", "line": 67 }, { "location": "src/transformSync.ts", "line": 45 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "required", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "ImportedModules", "value": "glob,globSync,glob/globSync" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ], "occurrences": [ { "location": "build/getWatchFolders.js", "line": 11 }, { "location": "src/getWatchFolders.ts", "line": 3 }, { "location": "src/getWatchFolders.ts", "line": 35 } ] } }, { "authors": [ { "name": "Christoph Tavan " } ], "group": "", "name": "getenv", "version": "2.0.0", "description": "Get and typecast environment variables.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/getenv@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ctavan/node-getenv" }, { "type": "vcs", "url": "git://github.com/ctavan/node-getenv.git" } ], "type": "library", "bom-ref": "pkg:npm/getenv@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/getenv/package.json" }, { "name": "ImportedModules", "value": "getenv,boolish,getenv/boolish,getenv/int" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getenv/package.json" } ], "concludedValue": "node_modules/getenv/package.json" } ], "occurrences": [ { "location": "build/env.js", "line": 4 }, { "location": "src/env.ts", "line": 1 }, { "location": "src/env.ts", "line": 6 }, { "location": "src/env.ts", "line": 11 }, { "location": "src/env.ts", "line": 16 }, { "location": "src/env.ts", "line": 21 } ] } }, { "authors": [ { "name": "Expo" } ], "group": "", "name": "expo-module-scripts", "version": "56.0.3", "description": "A private package for various tasks for Expo module packages like compiling and testing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/expo-module-scripts@56.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/expo-module-scripts#readme" }, { "type": "vcs", "url": "git+https://github.com/expo/expo.git" } ], "type": "library", "bom-ref": "pkg:npm/expo-module-scripts@56.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/expo-module-scripts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/expo-module-scripts/package.json" } ], "concludedValue": "node_modules/expo-module-scripts/package.json" } ] } }, { "authors": [ { "name": "Expo" } ], "group": "", "name": "expo", "version": "56.0.14", "description": "The Expo SDK", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/expo@56.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/expo" }, { "type": "vcs", "url": "https://github.com/expo/expo.git" } ], "type": "library", "bom-ref": "pkg:npm/expo@56.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/expo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/expo/package.json" } ], "concludedValue": "node_modules/expo/package.json" } ] } }, { "authors": [ { "name": "Desmond Brand (http://desmondbrand.com)" } ], "group": "", "name": "dedent", "version": "1.7.2", "description": "A string tag that strips indentation from multi-line strings. ⬅️", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dedent@1.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dmnd/dedent" }, { "type": "vcs", "url": "https://github.com/dmnd/dedent" } ], "type": "library", "bom-ref": "pkg:npm/dedent@1.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/dedent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dedent/package.json" } ], "concludedValue": "node_modules/dedent/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "build/babel-transformer.js", "line": 12 }, { "location": "build/binary-file-store.js", "line": 13 }, { "location": "build/file-store.js", "line": 12 }, { "location": "build/rewriteRequestUrl.js", "line": 13 }, { "location": "build/serializer/environmentVariableSerializerPlugin.js", "line": 12 }, { "location": "build/serializer/exportHermes.js", "line": 15 }, { "location": "build/serializer/fork/hmrJSBundle.js", "line": 20 }, { "location": "build/serializer/reconcileTransformSerializerPlugin.js", "line": 54 }, { "location": "build/serializer/sideEffects.js", "line": 15 }, { "location": "build/serializer/treeShakeSerializerPlugin.js", "line": 22 }, { "location": "build/serializer/treeShakeSerializerPlugin.js", "line": 23 }, { "location": "build/transform-plugins/importExportStatic.js", "line": 20 }, { "location": "build/transform-worker/browserslist.js", "line": 7 }, { "location": "build/transform-worker/collect-dependencies.js", "line": 54 }, { "location": "build/transform-worker/getAssets.js", "line": 21 }, { "location": "build/transform-worker/postcss.js", "line": 22 }, { "location": "build/transform-worker/supervising-transform-worker.js", "line": 45 }, { "location": "build/transform-worker/transform-worker.js", "line": 58 }, { "location": "build/transform-worker/utils/moduleMapper.js", "line": 9 }, { "location": "src/babel-transformer.ts", "line": 47 }, { "location": "src/binary-file-store.ts", "line": 9 }, { "location": "src/file-store.ts", "line": 6 }, { "location": "src/rewriteRequestUrl.ts", "line": 9 }, { "location": "src/serializer/environmentVariableSerializerPlugin.ts", "line": 18 }, { "location": "src/serializer/exportHermes.ts", "line": 11 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 20 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 49 }, { "location": "src/serializer/sideEffects.ts", "line": 21 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 29 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 30 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 18 }, { "location": "src/transform-worker/browserslist.ts", "line": 5 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 14 }, { "location": "src/transform-worker/getAssets.ts", "line": 16 }, { "location": "src/transform-worker/postcss.ts", "line": 27 }, { "location": "src/transform-worker/supervising-transform-worker.ts", "line": 17 }, { "location": "src/transform-worker/transform-worker.ts", "line": 39 }, { "location": "src/transform-worker/utils/moduleMapper.ts", "line": 16 } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "build/rewriteRequestUrl.js", "line": 10 }, { "location": "build/serializer/exportHermes.js", "line": 8 }, { "location": "src/rewriteRequestUrl.ts", "line": 5 }, { "location": "src/serializer/exportHermes.ts", "line": 2 }, { "location": "src/serializer/exportHermes.ts", "line": 134 } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "browserslist", "version": "4.28.2", "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserslist@4.28.2", "type": "library", "bom-ref": "pkg:npm/browserslist@4.28.2", "properties": [ { "name": "SrcFile", "value": "node_modules/browserslist/package.json" }, { "name": "ImportedModules", "value": "browserslist" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserslist/package.json" } ], "concludedValue": "node_modules/browserslist/package.json" } ], "occurrences": [ { "location": "build/transform-worker/browserslist.js", "line": 15 }, { "location": "src/transform-worker/browserslist.ts", "line": 18 } ] } }, { "group": "@types", "name": "picomatch", "version": "4.0.2", "description": "TypeScript definitions for picomatch", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/picomatch@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/picomatch" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/picomatch@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/picomatch/package.json" } ], "concludedValue": "node_modules/@types/picomatch/package.json" } ] } }, { "group": "@types", "name": "getenv", "version": "1.0.3", "description": "TypeScript definitions for getenv", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/getenv@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/getenv" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/getenv@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/getenv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/getenv/package.json" } ], "concludedValue": "node_modules/@types/getenv/package.json" } ] } }, { "group": "@types", "name": "babel__generator", "version": "7.27.0", "description": "TypeScript definitions for @babel/generator", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/babel__generator@7.27.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__generator" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/babel__generator@7.27.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/babel__generator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/babel__generator/package.json" } ], "concludedValue": "node_modules/@types/babel__generator/package.json" } ] } }, { "group": "@types", "name": "babel__core", "version": "7.20.5", "description": "TypeScript definitions for @babel/core", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/babel__core@7.20.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__core" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/babel__core@7.20.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/babel__core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/babel__core/package.json" } ], "concludedValue": "node_modules/@types/babel__core/package.json" } ] } }, { "group": "@types", "name": "babel__code-frame", "version": "7.27.0", "description": "TypeScript definitions for @babel/code-frame", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/babel__code-frame@7.27.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__code-frame" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/babel__code-frame@7.27.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/babel__code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/babel__code-frame/package.json" } ], "concludedValue": "node_modules/@types/babel__code-frame/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "description": "Trace the original position through a source map", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.5", "description": "Encode/decode sourcemap mappings", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" }, { "name": "ImportedModules", "value": "@jridgewell/sourcemap-codec" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "occurrences": [ { "location": "build/serializer/packedMap.js", "line": 316 }, { "location": "src/serializer/packedMap.ts", "line": 358 } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "remapping", "version": "2.3.5", "description": "Remap sequential sourcemaps through transformations to point at the original source code", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/remapping@2.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/remapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/remapping@2.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/remapping/package.json" }, { "name": "ImportedModules", "value": "@jridgewell/remapping" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/remapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/remapping/package.json" } ], "occurrences": [ { "location": "build/serializer/sourceMap.js", "line": 19 }, { "location": "src/serializer/sourceMap.ts", "line": 73 } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "gen-mapping", "version": "0.3.13", "description": "Generate source maps", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/gen-mapping/package.json" }, { "name": "ImportedModules", "value": "@jridgewell/gen-mapping" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/gen-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/gen-mapping/package.json" } ], "occurrences": [ { "location": "build/serializer/sourceMap.js", "line": 265 }, { "location": "src/serializer/sourceMap.ts", "line": 408 } ] } }, { "authors": [ { "name": "Expo" } ], "group": "@expo", "name": "spawn-async", "version": "1.8.0", "description": "A Promise-based interface into processes created by child_process.spawn", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40expo/spawn-async@1.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/spawn-async#readme" }, { "type": "vcs", "url": "git+https://github.com/expo/spawn-async.git" } ], "type": "library", "bom-ref": "pkg:npm/@expo/spawn-async@1.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@expo/spawn-async/package.json" }, { "name": "ImportedModules", "value": "@expo/spawn-async" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@expo/spawn-async/package.json" } ], "concludedValue": "node_modules/@expo/spawn-async/package.json" } ], "occurrences": [ { "location": "build/serializer/exportHermes.js", "line": 7 }, { "location": "src/serializer/exportHermes.ts", "line": 1 }, { "location": "src/serializer/exportHermes.ts", "line": 116 } ] } }, { "group": "@expo", "name": "require-utils", "version": "56.1.4", "description": "Reusable require and Node resolution utilities library for Expo", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40expo/require-utils@56.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/@expo/require-utils#readme" }, { "type": "vcs", "url": "https://github.com/expo/expo.git" } ], "type": "library", "bom-ref": "pkg:npm/@expo/require-utils@56.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@expo/require-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@expo/require-utils/package.json" } ], "concludedValue": "node_modules/@expo/require-utils/package.json" } ] } }, { "authors": [ { "name": "Expo" } ], "group": "@expo", "name": "metro", "version": "56.0.0", "description": "Generated and versioned meta-package wrapping Metro", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40expo/metro@56.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/expo/expo-metro.git" } ], "type": "library", "bom-ref": "pkg:npm/@expo/metro@56.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@expo/metro/package.json" }, { "name": "ExportedModules", "value": "@expo/metro/metro-transform-worker/utils/getMinifier" }, { "name": "ImportedModules", "value": "@expo/metro/metro-cache-key,getCacheKey,@expo/metro/metro-cache-key/getCacheKey,@expo/metro/metro-cache/stores/FileStore,Options,@expo/metro/metro-cache/stores/FileStore/Options,@expo/metro/metro/lib/CountingSet,@expo/metro/metro/lib/countLines,@expo/metro/metro/lib/getAppendScripts,@expo/metro/metro-transform-plugins,addParamsToDefineCall,@expo/metro/metro-transform-plugins/addParamsToDefineCall,normalizePseudoGlobals,@expo/metro/metro-transform-plugins/normalizePseudoGlobals,@expo/metro/metro/lib/isResolvedDependency,isResolvedDependency,@expo/metro/metro/lib/isResolvedDependency/isResolvedDependency,@expo/metro/metro/DeltaBundler/Serializers/helpers/js.js,isJsModule,@expo/metro/metro/DeltaBundler/Serializers/helpers/js.js/isJsModule,getJsOutput,@expo/metro/metro/DeltaBundler/Serializers/helpers/js.js/getJsOutput,@expo/metro/metro/ModuleGraph/worker/JsFileWrapping,@expo/metro/metro/ModuleGraph/worker/importLocationsPlugin,locToKey,@expo/metro/metro/ModuleGraph/worker/importLocationsPlugin/locToKey,importLocationsPlugin,@expo/metro/metro/ModuleGraph/worker/importLocationsPlugin/importLocationsPlugin,@expo/metro/metro/lib/bundleToString,@expo/metro/metro-source-map/Generator,@expo/metro/metro/DeltaBundler/Serializers/sourceMapString,@expo/metro/metro/Bundler/util,generateAssetCodeFileAst,@expo/metro/metro/Bundler/util/generateAssetCodeFileAst,@expo/metro/metro/Assets,getAssetData,@expo/metro/metro/Assets/getAssetData,AssetData,@expo/metro/metro/Assets/AssetData,@expo/metro/metro/ModuleGraph/worker/generateImportNames,@expo/metro/metro-cache,stableHash,@expo/metro/metro-cache/stableHash,@expo/metro/metro-source-map,FBSourceFunctionMap,@expo/metro/metro-source-map/FBSourceFunctionMap,MetroSourceMapSegmentTuple,@expo/metro/metro-source-map/MetroSourceMapSegmentTuple,BabelSourceMapSegment,@expo/metro/metro-source-map/BabelSourceMapSegment,BasicSourceMap,@expo/metro/metro-source-map/BasicSourceMap,HermesFunctionOffsets,@expo/metro/metro-source-map/HermesFunctionOffsets,MixedSourceMap,@expo/metro/metro-source-map/MixedSourceMap,functionMapBabelPlugin,@expo/metro/metro-source-map/functionMapBabelPlugin,@expo/metro/metro-transform-worker/utils/getMinifier,@expo/metro/metro-babel-transformer,BabelTransformer,@expo/metro/metro-babel-transformer/BabelTransformer,BabelTransformerArgs,@expo/metro/metro-babel-transformer/BabelTransformerArgs,BabelTransformerCacheKeyOptions,@expo/metro/metro-babel-transformer/BabelTransformerCacheKeyOptions,@expo/metro/metro-config,SymbolicatorConfigT,@expo/metro/metro-config/SymbolicatorConfigT,SerializerConfigT,@expo/metro/metro-config/SerializerConfigT,ConfigT,@expo/metro/metro-config/ConfigT,InputConfigT,@expo/metro/metro-config/InputConfigT,@expo/metro/metro/DeltaBundler/types,ReadOnlyGraph,@expo/metro/metro/DeltaBundler/types/ReadOnlyGraph,MixedOutput,@expo/metro/metro/DeltaBundler/types/MixedOutput,Module,@expo/metro/metro/DeltaBundler/types/Module,SerializerOptions,@expo/metro/metro/DeltaBundler/types/SerializerOptions,ReadOnlyDependencies,@expo/metro/metro/DeltaBundler/types/ReadOnlyDependencies,AsyncDependencyType,@expo/metro/metro/DeltaBundler/types/AsyncDependencyType,@expo/metro/metro/DeltaBundler,DeltaResult,@expo/metro/metro/DeltaBundler/DeltaResult,@expo/metro/metro/DeltaBundler/Module,@expo/metro/metro/DeltaBundler/ReadOnlyGraph,@expo/metro/metro/DeltaBundler/MixedOutput,TransformResultDependency,@expo/metro/metro/DeltaBundler/TransformResultDependency,@expo/metro/metro-runtime/modules/types,HmrModule,@expo/metro/metro-runtime/modules/types/HmrModule,@expo/metro/metro-transform-worker,JsOutput,@expo/metro/metro-transform-worker/JsOutput,JsTransformerConfig,@expo/metro/metro-transform-worker/JsTransformerConfig,JsTransformOptions,@expo/metro/metro-transform-worker/JsTransformOptions,Type,@expo/metro/metro-transform-worker/Type,@expo/metro/metro,MetroConfig,@expo/metro/metro/MetroConfig,@expo/metro/metro/AssetData,@expo/metro/metro/DeltaBundler/Serializers/sourceMapGenerator,SourceMapGeneratorOptions,@expo/metro/metro/DeltaBundler/Serializers/sourceMapGenerator/SourceMapGeneratorOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@expo/metro/package.json" } ], "concludedValue": "node_modules/@expo/metro/package.json" } ], "occurrences": [ { "location": "build/babel-transformer.js", "line": 6 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 60 }, { "location": "src/babel-transformer.ts", "line": 15 }, { "location": "src/babel-transformer.ts", "line": 286 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 22 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 843 }, { "location": "build/binary-file-store.js", "line": 7 }, { "location": "build/file-store.js", "line": 8 }, { "location": "src/binary-file-store.ts", "line": 1 }, { "location": "src/file-store.ts", "line": 1 }, { "location": "build/serializer/environmentVariableSerializerPlugin.js", "line": 10 }, { "location": "build/serializer/fork/baseJSBundle.js", "line": 20 }, { "location": "src/serializer/environmentVariableSerializerPlugin.ts", "line": 13 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 18 }, { "location": "build/serializer/environmentVariableSerializerPlugin.js", "line": 11 }, { "location": "build/serializer/fork/baseJSBundle.js", "line": 21 }, { "location": "build/transform-worker/transform-worker.js", "line": 47 }, { "location": "src/serializer/environmentVariableSerializerPlugin.ts", "line": 14 }, { "location": "src/serializer/environmentVariableSerializerPlugin.ts", "line": 139 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 19 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 191 }, { "location": "src/transform-worker/transform-worker.ts", "line": 10 }, { "location": "src/transform-worker/transform-worker.ts", "line": 274 }, { "location": "src/transform-worker/transform-worker.ts", "line": 323 }, { "location": "build/serializer/fork/baseJSBundle.js", "line": 22 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 20 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 159 }, { "location": "build/serializer/fork/hmrJSBundle.js", "line": 16 }, { "location": "build/serializer/fork/js.js", "line": 22 }, { "location": "build/serializer/reconcileTransformSerializerPlugin.js", "line": 46 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 62 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 14 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 106 }, { "location": "src/serializer/fork/js.ts", "line": 14 }, { "location": "src/serializer/fork/js.ts", "line": 45 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 19 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 282 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 25 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 491 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 852 }, { "location": "build/serializer/fork/js.js", "line": 21 }, { "location": "build/serializer/getCssDeps.js", "line": 11 }, { "location": "build/serializer/reconcileTransformSerializerPlugin.js", "line": 45 }, { "location": "build/serializer/serializeChunks.js", "line": 10 }, { "location": "build/serializer/sideEffects.js", "line": 9 }, { "location": "build/serializer/treeShakeSerializerPlugin.js", "line": 16 }, { "location": "src/serializer/fork/js.ts", "line": 13 }, { "location": "src/serializer/fork/js.ts", "line": 69 }, { "location": "src/serializer/getCssDeps.ts", "line": 4 }, { "location": "src/serializer/getCssDeps.ts", "line": 124 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 17 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 203 }, { "location": "src/serializer/serializeChunks.ts", "line": 15 }, { "location": "src/serializer/serializeChunks.ts", "line": 277 }, { "location": "src/serializer/serializeChunks.ts", "line": 301 }, { "location": "src/serializer/serializeChunks.ts", "line": 695 }, { "location": "src/serializer/sideEffects.ts", "line": 13 }, { "location": "src/serializer/sideEffects.ts", "line": 42 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 15 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 265 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 407 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 462 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 864 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 944 }, { "location": "build/serializer/getCssDeps.js", "line": 10 }, { "location": "build/serializer/sourceMap.js", "line": 33 }, { "location": "build/transform-worker/getAssets.js", "line": 17 }, { "location": "src/serializer/getCssDeps.ts", "line": 2 }, { "location": "src/serializer/getCssDeps.ts", "line": 42 }, { "location": "src/serializer/sourceMap.ts", "line": 103 }, { "location": "src/transform-worker/getAssets.ts", "line": 10 }, { "location": "src/transform-worker/getAssets.ts", "line": 134 }, { "location": "src/transform-worker/getAssets.ts", "line": 136 }, { "location": "build/serializer/reconcileTransformSerializerPlugin.js", "line": 43 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 56 }, { "location": "build/transform-worker/transformShim.js", "line": 42 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 15 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 266 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 14 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 404 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 459 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 702 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 703 }, { "location": "src/transform-worker/transformShim.ts", "line": 3 }, { "location": "src/transform-worker/transformShim.ts", "line": 42 }, { "location": "build/serializer/reconcileTransformSerializerPlugin.js", "line": 44 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 58 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 16 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 245 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 19 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 439 }, { "location": "build/serializer/serializeChunks.js", "line": 9 }, { "location": "build/serializer/withExpoSerializers.js", "line": 10 }, { "location": "src/serializer/serializeChunks.ts", "line": 14 }, { "location": "src/serializer/serializeChunks.ts", "line": 252 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 10 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 168 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 196 }, { "location": "build/serializer/sourceMap.js", "line": 26 }, { "location": "src/serializer/sourceMap.ts", "line": 22 }, { "location": "src/serializer/sourceMap.ts", "line": 90 }, { "location": "build/serializer/sourceMap.js", "line": 198 }, { "location": "src/serializer/sourceMap.ts", "line": 328 }, { "location": "build/transform-worker/asset-transformer.js", "line": 18 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 12 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 159 }, { "location": "build/transform-worker/getAssets.js", "line": 15 }, { "location": "src/transform-worker/getAssets.ts", "line": 8 }, { "location": "src/transform-worker/getAssets.ts", "line": 103 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 57 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 15 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 201 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 59 }, { "location": "build/transform-worker/postcss.js", "line": 212 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 21 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 877 }, { "location": "src/transform-worker/postcss.ts", "line": 282 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 61 }, { "location": "src/serializer/jsOutput.ts", "line": 8 }, { "location": "src/serializer/packedMap.ts", "line": 25 }, { "location": "src/serializer/sourceMap.ts", "line": 21 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 23 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 24 }, { "location": "build/transform-worker/utils/getMinifier.js", "line": 10 }, { "location": "src/transform-worker/utils/getMinifier.ts", "line": 5 }, { "location": "src/babel-transformer.ts", "line": 14 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 13 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 20 }, { "location": "src/customizeFrame.ts", "line": 2 }, { "location": "src/serializer/computeChunkFilenames.ts", "line": 1 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 18 }, { "location": "src/serializer/serializeChunks.ts", "line": 16 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 16 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 11 }, { "location": "src/serializer/environmentVariableSerializerPlugin.ts", "line": 12 }, { "location": "src/serializer/fork/baseJSBundle.ts", "line": 17 }, { "location": "src/serializer/getCssDeps.ts", "line": 3 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 14 }, { "location": "src/serializer/serializeChunks.ts", "line": 13 }, { "location": "src/serializer/sideEffects.ts", "line": 12 }, { "location": "src/serializer/sourceMap.ts", "line": 13 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 14 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 9 }, { "location": "src/transform-worker/getAssets.ts", "line": 11 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 12 }, { "location": "src/serializer/fork/js.ts", "line": 12 }, { "location": "src/serializer/fork/processModules.ts", "line": 9 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 8 }, { "location": "src/transform-worker/transform-worker.ts", "line": 9 }, { "location": "src/serializer/fork/hmrJSBundle.ts", "line": 13 }, { "location": "src/serializer/fork/js.ts", "line": 15 }, { "location": "src/serializer/jsOutput.ts", "line": 9 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 30 }, { "location": "src/transform-worker/resolveOptions.ts", "line": 1 }, { "location": "src/transform-worker/supervising-transform-worker.ts", "line": 1 }, { "location": "src/transform-worker/transform-worker.ts", "line": 11 }, { "location": "src/transform-worker/transformShim.ts", "line": 4 }, { "location": "src/serializer/serializeChunks.ts", "line": 7 }, { "location": "src/serializer/withExpoSerializers.ts", "line": 7 }, { "location": "src/serializer/sourceMap.ts", "line": 12 } ] } }, { "group": "@expo", "name": "json-file", "version": "10.2.0", "description": "A module for reading, writing, and manipulating JSON files", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40expo/json-file@10.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/@expo/json-file#readme" }, { "type": "vcs", "url": "https://github.com/expo/expo.git" } ], "type": "library", "bom-ref": "pkg:npm/@expo/json-file@10.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@expo/json-file/package.json" }, { "name": "ImportedModules", "value": "@expo/json-file" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@expo/json-file/package.json" } ], "concludedValue": "node_modules/@expo/json-file/package.json" } ], "occurrences": [ { "location": "build/transform-worker/postcss.js", "line": 16 }, { "location": "build/utils/getPkgVersion.js", "line": 7 }, { "location": "src/transform-worker/postcss.ts", "line": 7 }, { "location": "src/transform-worker/postcss.ts", "line": 272 }, { "location": "src/utils/getPkgVersion.ts", "line": 1 }, { "location": "src/utils/getPkgVersion.ts", "line": 11 } ] }, "tags": [ "json" ] }, { "group": "@expo", "name": "env", "version": "2.3.1", "description": "hydrate environment variables from .env files into process.env", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40expo/env@2.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/@expo/env#readme" }, { "type": "vcs", "url": "https://github.com/expo/expo.git" } ], "type": "library", "bom-ref": "pkg:npm/@expo/env@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@expo/env/package.json" }, { "name": "ImportedModules", "value": "@expo/env,parseEnv,@expo/env/parseEnv" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@expo/env/package.json" } ], "concludedValue": "node_modules/@expo/env/package.json" } ], "occurrences": [ { "location": "build/transform-worker/dot-env-development.js", "line": 10 }, { "location": "src/transform-worker/dot-env-development.ts", "line": 8 }, { "location": "src/transform-worker/dot-env-development.ts", "line": 12 } ] } }, { "group": "@expo", "name": "config", "version": "56.0.11", "description": "A library for interacting with the app.json", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40expo/config@56.0.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expo/expo/tree/main/packages/@expo/config#readme" }, { "type": "vcs", "url": "https://github.com/expo/expo.git" } ], "type": "library", "bom-ref": "pkg:npm/@expo/config@56.0.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@expo/config/package.json" }, { "name": "ImportedModules", "value": "@expo/config/paths,getMetroServerRoot,@expo/config/paths/getMetroServerRoot,getMetroWorkspaceGlobs,@expo/config/paths/getMetroWorkspaceGlobs,resolveEntryPoint,@expo/config/paths/resolveEntryPoint,@expo/config,ExpoConfig,@expo/config/ExpoConfig,getConfig,@expo/config/getConfig" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@expo/config/package.json" } ], "concludedValue": "node_modules/@expo/config/package.json" } ], "occurrences": [ { "location": "build/getModulesPaths.js", "line": 7 }, { "location": "build/getWatchFolders.js", "line": 9 }, { "location": "build/rewriteRequestUrl.js", "line": 9 }, { "location": "src/getModulesPaths.ts", "line": 1 }, { "location": "src/getModulesPaths.ts", "line": 10 }, { "location": "src/getWatchFolders.ts", "line": 1 }, { "location": "src/getWatchFolders.ts", "line": 55 }, { "location": "src/getWatchFolders.ts", "line": 70 }, { "location": "src/rewriteRequestUrl.ts", "line": 4 }, { "location": "src/rewriteRequestUrl.ts", "line": 81 }, { "location": "src/rewriteRequestUrl.ts", "line": 127 }, { "location": "build/rewriteRequestUrl.js", "line": 8 }, { "location": "src/rewriteRequestUrl.ts", "line": 2 }, { "location": "src/rewriteRequestUrl.ts", "line": 3 }, { "location": "src/rewriteRequestUrl.ts", "line": 71 } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "generator", "version": "7.29.1", "description": "Turns an AST into code.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/generator@7.29.1", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-generator" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/generator@7.29.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/generator/package.json" }, { "name": "ImportedModules", "value": "@babel/generator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/generator/package.json" } ], "concludedValue": "node_modules/@babel/generator/package.json" } ], "occurrences": [ { "location": "build/serializer/reconcileTransformSerializerPlugin.js", "line": 42 }, { "location": "build/serializer/treeShakeSerializerPlugin.js", "line": 15 }, { "location": "build/transform-worker/collect-dependencies.js", "line": 51 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 55 }, { "location": "build/transform-worker/transformShim.js", "line": 41 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 8 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 288 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 8 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 167 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 10 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 632 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 680 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 868 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 13 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 497 }, { "location": "src/transform-worker/transformShim.ts", "line": 2 }, { "location": "src/transform-worker/transformShim.ts", "line": 51 } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "core", "version": "7.29.0", "description": "Babel compiler core.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/core@7.29.0", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-core" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/core@7.29.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/core/package.json" }, { "name": "ExportedModules", "value": "@babel/core,PluginItem,@babel/core/PluginItem,TransformOptions,@babel/core/TransformOptions,loadPartialConfigSync,@babel/core/loadPartialConfigSync,transformFromAstSync,@babel/core/transformFromAstSync,transformSync,@babel/core/transformSync" }, { "name": "ImportedModules", "value": "@babel/core,types,@babel/core/types,NodePath,@babel/core/NodePath,traverse,@babel/core/traverse,template,@babel/core/template,ConfigAPI,@babel/core/ConfigAPI,PluginObj,@babel/core/PluginObj,ParseResult,@babel/core/ParseResult,transformFromAstSync,@babel/core/transformFromAstSync,parse,@babel/core/parse,PluginItem,@babel/core/PluginItem" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/core/package.json" } ], "concludedValue": "node_modules/@babel/core/package.json" } ], "occurrences": [ { "location": "build/babel-core.js", "line": 5 }, { "location": "build/serializer/treeShakeSerializerPlugin.js", "line": 14 }, { "location": "build/transform-plugins/importExportStatic.js", "line": 17 }, { "location": "build/transform-worker/asset-transformer.js", "line": 17 }, { "location": "build/transform-worker/collect-dependencies.js", "line": 50 }, { "location": "build/transform-worker/metro-transform-worker.js", "line": 54 }, { "location": "build/transform-worker/transformShim.js", "line": 40 }, { "location": "src/babel-core.ts", "line": 8 }, { "location": "src/serializer/jsOutput.ts", "line": 7 }, { "location": "src/serializer/reconcileTransformSerializerPlugin.ts", "line": 7 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 7 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 54 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 89 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 95 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 99 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 104 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 113 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 120 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 298 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 304 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 308 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 313 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 322 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 331 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 363 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 364 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 365 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 371 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 374 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 652 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 664 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 668 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 669 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 670 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 687 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 711 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 790 }, { "location": "src/serializer/treeShakeSerializerPlugin.ts", "line": 799 }, { "location": "src/transform-plugins/helpers.ts", "line": 1 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 1 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 134 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 160 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 202 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 251 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 267 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 310 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 322 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 323 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 324 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 331 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 332 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 333 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 337 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 392 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 394 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 395 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 396 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 413 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 437 }, { "location": "src/transform-plugins/importExportLiveBindings.ts", "line": 442 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 12 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 13 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 74 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 78 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 82 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 90 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 98 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 103 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 107 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 151 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 363 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 364 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 414 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 428 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 429 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 430 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 440 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 441 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 455 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 456 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 457 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 465 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 466 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 477 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 478 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 479 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 487 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 488 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 499 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 500 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 501 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 509 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 510 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 526 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 527 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 528 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 542 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 543 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 544 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 545 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 555 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 556 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 557 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 558 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 559 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 573 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 585 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 586 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 587 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 599 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 600 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 613 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 614 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 625 }, { "location": "src/transform-plugins/importExportStatic.ts", "line": 626 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 11 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 21 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 25 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 29 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 34 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 86 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 87 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 129 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 130 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 137 }, { "location": "src/transform-worker/asset-transformer.ts", "line": 149 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 8 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 9 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 175 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 222 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 331 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 334 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 480 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 560 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 562 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 564 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 572 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 580 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 732 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 880 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 892 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 896 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 900 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 904 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 908 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 912 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 916 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 920 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 924 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 938 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 991 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 998 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 1000 }, { "location": "src/transform-worker/collect-dependencies.ts", "line": 1006 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 11 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 12 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 183 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 274 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 321 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 366 }, { "location": "src/transform-worker/metro-transform-worker.ts", "line": 885 }, { "location": "src/transform-worker/transformShim.ts", "line": 1 }, { "location": "src/transform-worker/transformShim.ts", "line": 25 } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "code-frame", "version": "7.29.0", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.29.0", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-code-frame" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.29.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "ImportedModules", "value": "@babel/code-frame" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ], "occurrences": [ { "location": "build/transform-worker/css-modules.js", "line": 11 }, { "location": "src/transform-worker/css-modules.ts", "line": 1 }, { "location": "src/transform-worker/css-modules.ts", "line": 126 }, { "location": "src/transform-worker/css-modules.ts", "line": 200 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@expo/metro-config@56.0.16" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-25T14:40:50Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, September 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'metro-config' with version '56.0.16'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 34 source files." } ] }