{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d4fedd75-8144-44d4-b9de-f1d29ef13652", "version": 1, "metadata": { "timestamp": "2026-09-24T06:34:06Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "farrow", "group": "", "version": "1.12.1", "description": "Useful modules for developing Farrow App", "purl": "pkg:npm/farrow@1.12.1", "bom-ref": "pkg:npm/farrow@1.12.1", "author": "Jade Gu", "properties": [ { "name": "cdx:npm:bin", "value": "farrow" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, test, test:coverage" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Lucifier129/farrow.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "fixtures/project0/node_modules/farrow-api-server/package.json\\nfixtures/project0/node_modules/farrow-api/package.json\\nfixtures/project0/node_modules/farrow-http/package.json\\nfixtures/project0/node_modules/farrow-schema/package.json\\nfixtures/project0/node_modules/farrow/package.json\\nnode_modules/@types/fs-extra/package.json\\nnode_modules/@types/jest/package.json\\nnode_modules/@types/node-fetch/package.json\\nnode_modules/@types/shelljs/package.json\\nnode_modules/@types/supertest/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/commander/package.json\\nnode_modules/cosmiconfig/package.json\\nnode_modules/esbuild-node-externals/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/execa/package.json\\nnode_modules/farrow-api-server/package.json\\nnode_modules/farrow-api/package.json\\nnode_modules/farrow-http/package.json\\nnode_modules/farrow-schema/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/jest/package.json\\nnode_modules/leven/package.json\\nnode_modules/node-fetch/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/replace-in-file/package.json\\nnode_modules/shelljs/package.json\\nnode_modules/slash/package.json\\nnode_modules/supertest/package.json\\nnode_modules/ts-jest/package.json\\nnode_modules/tslib/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "4.5.5", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@4.5.5", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@4.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "tslib", "version": "2.3.1", "description": "Runtime library for TypeScript helper functions", "scope": "required", "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@2.3.1", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/tslib.git" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tslib/package.json" }, { "name": "ImportedModules", "value": "tslib" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tslib/package.json" } ], "concludedValue": "node_modules/tslib/package.json" } ], "occurrences": [ { "location": "dist/api-client/index.js", "line": 4 }, { "location": "dist/api-client/replaceUrl.js", "line": 4 }, { "location": "dist/bin/index.js", "line": 3 }, { "location": "dist/bundler/server.js", "line": 4 }, { "location": "dist/scripts/build.js", "line": 3 }, { "location": "dist/scripts/dev.js", "line": 3 }, { "location": "dist/scripts/start.js", "line": 3 }, { "location": "dist/util/join.js", "line": 4 }, { "location": "dist/util/watchFiles.js", "line": 4 } ] } }, { "authors": [ { "name": "Kulshekhar Kabra (https://github.com/kulshekhar)" } ], "group": "", "name": "ts-jest", "version": "27.1.3", "description": "A Jest transformer with source map support that lets you use Jest to test projects written in TypeScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ts-jest@27.1.3", "externalReferences": [ { "type": "vcs", "url": "https://kulshekhar.github.io/ts-jest" }, { "type": "vcs", "url": "git+https://github.com/kulshekhar/ts-jest.git" } ], "type": "library", "bom-ref": "pkg:npm/ts-jest@27.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ts-jest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ts-jest/package.json" } ], "concludedValue": "node_modules/ts-jest/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "TJ Holowaychuk" } ], "group": "", "name": "supertest", "version": "6.2.2", "description": "SuperAgent driven library for testing HTTP servers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supertest@6.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/supertest.git" } ], "type": "library", "bom-ref": "pkg:npm/supertest@6.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/supertest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supertest/package.json" } ], "concludedValue": "node_modules/supertest/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "slash", "version": "3.0.0", "description": "Convert Windows backslash paths to slash paths", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@3.0.0", "type": "library", "bom-ref": "pkg:npm/slash@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slash/package.json" }, { "name": "ImportedModules", "value": "slash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slash/package.json" } ], "concludedValue": "node_modules/slash/package.json" } ], "occurrences": [ { "location": "dist/bundler/server.js", "line": 8 }, { "location": "dist/util/join.js", "line": 6 }, { "location": "src/bundler/server.ts", "line": 5 }, { "location": "src/bundler/server.ts", "line": 301 }, { "location": "src/util/join.ts", "line": 2 }, { "location": "src/util/join.ts", "line": 5 } ] } }, { "group": "", "name": "shelljs", "version": "0.8.5", "description": "Portable Unix shell commands for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shelljs@0.8.5", "externalReferences": [ { "type": "vcs", "url": "http://github.com/shelljs/shelljs" }, { "type": "vcs", "url": "git://github.com/shelljs/shelljs.git" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/shelljs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shelljs/package.json" } ], "concludedValue": "node_modules/shelljs/package.json" } ] } }, { "authors": [ { "name": "Adam Reis (https://adam.reiz.nz/)" } ], "group": "", "name": "replace-in-file", "version": "6.3.2", "description": "A simple utility to quickly replace text in one or more files.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/replace-in-file@6.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/adamreisnz/replace-in-file#readme" }, { "type": "vcs", "url": "https://github.com/adamreisnz/replace-in-file.git" } ], "type": "library", "bom-ref": "pkg:npm/replace-in-file@6.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/replace-in-file/package.json" }, { "name": "ImportedModules", "value": "replace-in-file,replaceInFile,replace-in-file/replaceInFile" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/replace-in-file/package.json" } ], "concludedValue": "node_modules/replace-in-file/package.json" } ], "occurrences": [ { "location": "dist/api-client/replaceUrl.js", "line": 5 }, { "location": "src/api-client/replaceUrl.ts", "line": 1 }, { "location": "src/api-client/replaceUrl.ts", "line": 8 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg-up", "version": "7.0.1", "description": "Read the closest package.json file", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg-up@7.0.1", "type": "library", "bom-ref": "pkg:npm/read-pkg-up@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/package.json" }, { "name": "ImportedModules", "value": "read-pkg-up" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg-up/package.json" } ], "concludedValue": "node_modules/read-pkg-up/package.json" } ], "occurrences": [ { "location": "dist/bundler/server.js", "line": 10 }, { "location": "src/bundler/server.ts", "line": 7 }, { "location": "src/bundler/server.ts", "line": 39 } ] } }, { "authors": [ { "name": "David Frank" } ], "group": "", "name": "node-fetch", "version": "2.6.7", "description": "A light-weight module that brings window.fetch to node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-fetch@2.6.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bitinn/node-fetch" }, { "type": "vcs", "url": "https://github.com/bitinn/node-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/node-fetch@2.6.7", "properties": [ { "name": "SrcFile", "value": "node_modules/node-fetch/package.json" }, { "name": "ImportedModules", "value": "node-fetch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-fetch/package.json" } ], "concludedValue": "node_modules/node-fetch/package.json" } ], "occurrences": [ { "location": "dist/api-client/index.js", "line": 8 }, { "location": "src/api-client/index.ts", "line": 4 }, { "location": "src/api-client/index.ts", "line": 80 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "leven", "version": "3.1.0", "description": "Measure the difference between two strings using the fastest JS implementation of the Levenshtein distance algorithm", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/leven@3.1.0", "type": "library", "bom-ref": "pkg:npm/leven@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/leven/package.json" }, { "name": "ImportedModules", "value": "leven" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/leven/package.json" } ], "concludedValue": "node_modules/leven/package.json" } ], "occurrences": [ { "location": "dist/bin/index.js", "line": 6 }, { "location": "src/bin/index.ts", "line": 3 }, { "location": "src/bin/index.ts", "line": 72 }, { "location": "src/bin/index.ts", "line": 73 } ] } }, { "group": "", "name": "jest", "version": "27.4.7", "description": "Delightful JavaScript Testing.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jest@27.4.7", "externalReferences": [ { "type": "website", "url": "https://jestjs.io/" }, { "type": "vcs", "url": "https://github.com/facebook/jest" } ], "type": "library", "bom-ref": "pkg:npm/jest@27.4.7", "properties": [ { "name": "SrcFile", "value": "node_modules/jest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jest/package.json" } ], "concludedValue": "node_modules/jest/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "9.1.0", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@9.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@9.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "ImportedModules", "value": "fs-extra,ensureDir,fs-extra/ensureDir" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ], "occurrences": [ { "location": "dist/api-client/index.js", "line": 6 }, { "location": "src/api-client/index.ts", "line": 2 }, { "location": "src/api-client/index.ts", "line": 14 } ] } }, { "authors": [ { "name": "Jade Gu" } ], "group": "", "name": "farrow-schema", "version": "1.12.1", "description": "A powerful and extensible schema builder", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/farrow-schema@1.12.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Lucifier129/farrow.git" } ], "type": "library", "bom-ref": "pkg:npm/farrow-schema@1.12.1", "properties": [ { "name": "SrcFile", "value": "node_modules/farrow-schema/package.json" }, { "name": "ImportedModules", "value": "farrow-schema,farrow-schema/Int,ObjectType,farrow-schema/ObjectType,Type,farrow-schema/Type" }, { "name": "SrcFile", "value": "fixtures/project0/node_modules/farrow-schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "fixtures/project0/node_modules/farrow-schema/package.json" } ], "concludedValue": "fixtures/project0/node_modules/farrow-schema/package.json" } ], "occurrences": [ { "location": "fixtures/project0/src/api.ts", "line": 1 } ] } }, { "authors": [ { "name": "Jade Gu" } ], "group": "", "name": "farrow-http", "version": "1.12.0", "description": "A Type-Friendly Web Framework", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/farrow-http@1.12.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Lucifier129/farrow.git" } ], "type": "framework", "bom-ref": "pkg:npm/farrow-http@1.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/farrow-http/package.json" }, { "name": "ImportedModules", "value": "farrow-http,Http,farrow-http/Http,Response,farrow-http/Response" }, { "name": "SrcFile", "value": "fixtures/project0/node_modules/farrow-http/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "fixtures/project0/node_modules/farrow-http/package.json" } ], "concludedValue": "fixtures/project0/node_modules/farrow-http/package.json" } ], "occurrences": [ { "location": "fixtures/project0/src/http.ts", "line": 1 }, { "location": "fixtures/project0/src/http.ts", "line": 4 }, { "location": "fixtures/project0/src/http.ts", "line": 9 }, { "location": "fixtures/project0/src/http.ts", "line": 17 }, { "location": "fixtures/project0/src/http.ts", "line": 23 } ] }, "tags": [ "framework", "web" ] }, { "authors": [ { "name": "Jade Gu" } ], "group": "", "name": "farrow-api-server", "version": "1.12.1", "description": "A type-friendly BFF framework", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/farrow-api-server@1.12.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Lucifier129/farrow.git" } ], "type": "framework", "bom-ref": "pkg:npm/farrow-api-server@1.12.1", "properties": [ { "name": "SrcFile", "value": "node_modules/farrow-api-server/package.json" }, { "name": "ImportedModules", "value": "farrow-api-server/dist/generateApiClient,generatorApiClient,farrow-api-server/dist/generateApiClient/generatorApiClient,farrow-api-server,ApiService,farrow-api-server/ApiService,IntrospectionCalling,farrow-api-server/IntrospectionCalling" }, { "name": "SrcFile", "value": "fixtures/project0/node_modules/farrow-api-server/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "fixtures/project0/node_modules/farrow-api-server/package.json" } ], "concludedValue": "fixtures/project0/node_modules/farrow-api-server/package.json" } ], "occurrences": [ { "location": "dist/api-client/index.js", "line": 10 }, { "location": "src/api-client/index.ts", "line": 8 }, { "location": "src/api-client/index.ts", "line": 103 }, { "location": "fixtures/project0/src/api.ts", "line": 3 }, { "location": "fixtures/project0/src/api.ts", "line": 47 }, { "location": "src/api-client/index.ts", "line": 9 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Jade Gu" } ], "group": "", "name": "farrow-api", "version": "1.12.1", "description": "A type-friendly BFF framework", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/farrow-api@1.12.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Lucifier129/farrow.git" } ], "type": "framework", "bom-ref": "pkg:npm/farrow-api@1.12.1", "properties": [ { "name": "SrcFile", "value": "node_modules/farrow-api/package.json" }, { "name": "ImportedModules", "value": "farrow-api/dist/prettier,format,farrow-api/dist/prettier/format,farrow-api,farrow-api/Api,farrow-api/dist/toJSON,FormatResult,farrow-api/dist/toJSON/FormatResult,farrow-api/dist/generateApi,CodegenOptions,farrow-api/dist/generateApi/CodegenOptions" }, { "name": "SrcFile", "value": "fixtures/project0/node_modules/farrow-api/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "fixtures/project0/node_modules/farrow-api/package.json" } ], "concludedValue": "fixtures/project0/node_modules/farrow-api/package.json" } ], "occurrences": [ { "location": "dist/api-client/index.js", "line": 9 }, { "location": "src/api-client/index.ts", "line": 7 }, { "location": "src/api-client/index.ts", "line": 115 }, { "location": "fixtures/project0/src/api.ts", "line": 2 }, { "location": "fixtures/project0/src/api.ts", "line": 14 }, { "location": "fixtures/project0/src/api.ts", "line": 26 }, { "location": "src/api-client/index.ts", "line": 5 }, { "location": "src/api-client/index.ts", "line": 6 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "5.1.1", "description": "Process execution for humans", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@5.1.1", "type": "library", "bom-ref": "pkg:npm/execa@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "ImportedModules", "value": "execa,ExecaChildProcess,execa/ExecaChildProcess" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ], "occurrences": [ { "location": "dist/bundler/server.js", "line": 6 }, { "location": "src/bundler/server.ts", "line": 2 }, { "location": "src/bundler/server.ts", "line": 164 } ] } }, { "authors": [ { "name": "Leo Pradel " } ], "group": "", "name": "esbuild-node-externals", "version": "1.4.1", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild-node-externals@1.4.1", "type": "library", "bom-ref": "pkg:npm/esbuild-node-externals@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild-node-externals/package.json" }, { "name": "ImportedModules", "value": "esbuild-node-externals,nodeExternalsPlugin,esbuild-node-externals/nodeExternalsPlugin" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild-node-externals/package.json" } ], "concludedValue": "node_modules/esbuild-node-externals/package.json" } ], "occurrences": [ { "location": "dist/bundler/server.js", "line": 11 }, { "location": "src/bundler/server.ts", "line": 8 }, { "location": "src/bundler/server.ts", "line": 53 } ] } }, { "group": "", "name": "esbuild", "version": "0.14.13", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild@0.14.13", "type": "library", "bom-ref": "pkg:npm/esbuild@0.14.13", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" }, { "name": "ImportedModules", "value": "esbuild,Plugin,esbuild/Plugin,BuildOptions,esbuild/BuildOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ], "occurrences": [ { "location": "dist/bundler/server.js", "line": 7 }, { "location": "src/bundler/server.ts", "line": 3 }, { "location": "src/bundler/server.ts", "line": 4 }, { "location": "src/bundler/server.ts", "line": 56 } ] } }, { "authors": [ { "name": "David Clark " } ], "group": "", "name": "cosmiconfig", "version": "7.0.1", "description": "Find and load configuration from a package.json property, rc file, or CommonJS module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cosmiconfig@7.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davidtheclark/cosmiconfig#readme" }, { "type": "vcs", "url": "git+https://github.com/davidtheclark/cosmiconfig.git" } ], "type": "library", "bom-ref": "pkg:npm/cosmiconfig@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cosmiconfig/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cosmiconfig/package.json" } ], "concludedValue": "node_modules/cosmiconfig/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "8.3.0", "description": "the complete solution for node.js command-line programs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@8.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@8.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "ImportedModules", "value": "commander,Command,commander/Command" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ], "occurrences": [ { "location": "dist/bin/index.js", "line": 4 }, { "location": "src/bin/index.ts", "line": 1 } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "3.5.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@3.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@3.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "ImportedModules", "value": "chokidar" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ], "occurrences": [ { "location": "dist/util/watchFiles.js", "line": 5 }, { "location": "src/util/watchFiles.ts", "line": 1 }, { "location": "src/util/watchFiles.ts", "line": 8 } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "dist/bin/index.js", "line": 5 }, { "location": "src/bin/index.ts", "line": 2 }, { "location": "src/bin/index.ts", "line": 47 }, { "location": "src/bin/index.ts", "line": 79 } ] } }, { "group": "@types", "name": "supertest", "version": "2.0.11", "description": "TypeScript definitions for SuperTest", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/supertest@2.0.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/supertest@2.0.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/supertest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/supertest/package.json" } ], "concludedValue": "node_modules/@types/supertest/package.json" } ] } }, { "group": "@types", "name": "shelljs", "version": "0.8.11", "description": "TypeScript definitions for ShellJS", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/shelljs@0.8.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/shelljs" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/shelljs@0.8.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/shelljs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/shelljs/package.json" } ], "concludedValue": "node_modules/@types/shelljs/package.json" } ] } }, { "group": "@types", "name": "node-fetch", "version": "2.5.12", "description": "TypeScript definitions for node-fetch", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node-fetch@2.5.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node-fetch" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node-fetch@2.5.12", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node-fetch/package.json" } ], "concludedValue": "node_modules/@types/node-fetch/package.json" } ] } }, { "group": "@types", "name": "jest", "version": "27.4.0", "description": "TypeScript definitions for Jest", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/jest@27.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/jest" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/jest@27.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/jest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/jest/package.json" } ], "concludedValue": "node_modules/@types/jest/package.json" } ] }, "tags": [ "test" ] }, { "group": "@types", "name": "fs-extra", "version": "9.0.13", "description": "TypeScript definitions for fs-extra", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/fs-extra@9.0.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/fs-extra" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/fs-extra@9.0.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/fs-extra/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/fs-extra/package.json" } ], "concludedValue": "node_modules/@types/fs-extra/package.json" } ] } }, { "authors": [ { "name": "Jade Gu" } ], "group": "", "name": "farrow", "version": "1.12.1", "description": "Useful modules for developing Farrow App", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/farrow@1.12.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Lucifier129/farrow.git" } ], "type": "library", "bom-ref": "pkg:npm/farrow@1.12.1", "properties": [ { "name": "SrcFile", "value": "fixtures/project0/node_modules/farrow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "fixtures/project0/node_modules/farrow/package.json" } ], "concludedValue": "fixtures/project0/node_modules/farrow/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/farrow@1.12.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-24T06:34:06Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'farrow' with version '1.12.1'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 33 source files." } ] }