{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2ef01918-eef6-47b3-87fc-c5ced696a9a1", "version": 1, "metadata": { "timestamp": "2026-09-25T17:30:28Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "find-node-modules", "group": "", "version": "2.1.3", "description": "Return an array of all parent node_modules directories", "purl": "pkg:npm/find-node-modules@2.1.3", "bom-ref": "pkg:npm/find-node-modules@2.1.3", "author": "Callum Macrae ", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/callumacrae/find-node-modules" }, { "type": "vcs", "url": "https://github.com/callumacrae/find-node-modules" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "findup-sync", "version": "4.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "ea3bef9ffd76202e2ab8b04bd4a3689310bbc164ef62771a554612a315b0ed8ca43cbb91ae7bf8a9d1dc48ecb0388e51a6439519e411b5633cfeaf86e96eaa7d" } ], "purl": "pkg:npm/findup-sync@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/findup-sync@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-4.0.0.tgz" }, { "name": "ImportedModules", "value": "findup-sync" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 4 } ] } }, { "group": "", "name": "detect-file", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f0d66d03672a825cb1b73bdb3fe62310c8e552b7" } ], "purl": "pkg:npm/detect-file@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/detect-file/-/detect-file-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/detect-file@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/detect-file/-/detect-file-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-glob", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e46d2d2ad05314898ea839cb076846e81a76a9c28415dba8e2d66ef4c4ff1fa350bff821872df4a39e6e7da7f127f2dd1fbf4b2ecd8a7eb9fce532cac80ec152" } ], "purl": "pkg:npm/is-glob@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-extglob", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2" } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "micromatch", "version": "4.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cbb1691d26cc50ca323db6144b33ba3da67a17246740ea47b8ac1ba351be2a7724f795d553840088a7461278f9c30a12ecf94e82d857ff4f6ee62149f9a61fe5" } ], "purl": "pkg:npm/micromatch@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "braces", "version": "3.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6fcba6f8bd51cccdd60d2cef866ea0233d727d36c1b7a61395c10a02fb26a82659170e3acfadba9558fd8f5c843d6df71f91fe94142964c3f593c97eefc1dad0" } ], "purl": "pkg:npm/braces@3.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fill-range", "version": "7.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a8ea3d17e74c5260b62dc6f805b56f9ca2714cf8c29be451a5ee200ee1abce42fb984565fdd8d84aed8e750d8f6b7d36378a2a91283d8abea368b589d94495a5" } ], "purl": "pkg:npm/fill-range@7.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "to-regex-range", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1" } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-number", "version": "7.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e" } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "picomatch", "version": "2.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ab433ff5e647ce6af402e957c8fc0d7d98edc19fd105995b3772b7084ad5ae4e744f6012608ec1c9ed04bde90563720fd4db760c7bb4adef95d991c8a4c92e5a" } ], "purl": "pkg:npm/picomatch@2.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve-dir", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "79a40644c362be82f26effe739c9bb5382046f43" } ], "purl": "pkg:npm/resolve-dir@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve-dir@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "expand-tilde", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "97e801aa052df02454de46b02bf621642cdc8502" } ], "purl": "pkg:npm/expand-tilde@2.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/expand-tilde@2.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "homedir-polyfill", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7929a6584e5b6532b6368bb8834008df367daecc29ec644aa0a5d2d412d492f3ef88eaace184cdd5d8d022aad7cbd939804b5d2cfcbce898d1c2c34cf6d9c370" } ], "purl": "pkg:npm/homedir-polyfill@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/homedir-polyfill@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "parse-passwd", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6d5b934a456993b23d37f40a382d6f1666a8e5c6" } ], "purl": "pkg:npm/parse-passwd@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/parse-passwd@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "global-modules", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b0ace91247f5d46a4e16ec346738f39ade01e146708ce706ef9ecf3efadf87170b15bab4c29b20a4eab1a71b71162086e03b46f7733a5d155b176a0675ebfb6e" } ], "purl": "pkg:npm/global-modules@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/global-modules@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "global-prefix", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dbf743c6c14992593c655568cb66ed32c0122ebe" } ], "purl": "pkg:npm/global-prefix@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/global-prefix@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ini", "version": "1.3.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "255ff2ba0576bb35b988c4528990320ed41dfa7c6d5278de2edd1a70d770f7c90a2ebbee455c81f34b6c444384ef2bc65606a5859e913570a61079142812b17b" } ], "purl": "pkg:npm/ini@1.3.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ini@1.3.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-windows", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520" } ], "purl": "pkg:npm/is-windows@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-windows@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "which", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221" } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/which" }, { "name": "cdx:npm:bin", "value": "which" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isexe", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10" } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "merge", "version": "2.1.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "8f3f827eb83d1963996d00270d0e219559d0932fb7e35624e6bbbc6d949eeac2034c2220f27f62feeee149019254e1770bb947ea61adaa39224fd1b8c052cbd3" } ], "purl": "pkg:npm/merge@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/merge/-/merge-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/merge@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/merge/-/merge-2.1.1.tgz" }, { "name": "ImportedModules", "value": "merge" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 5 } ] } }, { "group": "", "name": "faucet", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "597dcf1d2189a2c062321b591e8f151ed2039d9c" } ], "purl": "pkg:npm/faucet@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/faucet/-/faucet-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/faucet@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/faucet/-/faucet-0.0.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/faucet" }, { "name": "cdx:npm:bin", "value": "faucet" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "defined", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f35eea7d705e933baf13b2f03b3f83d921403b3e" } ], "purl": "pkg:npm/defined@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/defined/-/defined-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/defined@0.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/defined/-/defined-0.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "duplexer", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1" } ], "purl": "pkg:npm/duplexer@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/duplexer@0.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d7aa327bcecf518f9106ac6b8f003fa3bcea8566" } ], "purl": "pkg:npm/minimist@0.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sprintf", "version": "0.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8f83e39a9317c1a502cb7db8050e51c679f6edcf" } ], "purl": "pkg:npm/sprintf@0.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sprintf/-/sprintf-0.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sprintf@0.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sprintf/-/sprintf-0.1.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tap-parser", "version": "0.4.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a4eae190c10d76c7a111921ff38bbe4d58f09eea" } ], "purl": "pkg:npm/tap-parser@0.4.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tap-parser/-/tap-parser-0.4.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tap-parser@0.4.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tap-parser/-/tap-parser-0.4.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.1.14", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7cf4c54ef648e3813084c636dd2079e166c081d9" } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf" } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "0.10.31", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94" } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tape", "version": "2.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2e7ce0a31df09f8d6851664a71842e0ca5057af7" } ], "purl": "pkg:npm/tape@2.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tape/-/tape-2.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tape@2.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tape/-/tape-2.3.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/faucet/node_modules/.bin/tape" }, { "name": "cdx:npm:bin", "value": "tape" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "deep-equal", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b246c2b80a570a47c11be1d9bd1070ec878b87ce" } ], "purl": "pkg:npm/deep-equal@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jsonify", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73" } ], "purl": "pkg:npm/jsonify@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsonify@0.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resumer", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f1e8f461e4064ba39e82af3cdc2a8c893d076759" } ], "purl": "pkg:npm/resumer@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resumer/-/resumer-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resumer@0.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resumer/-/resumer-0.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "through", "version": "2.3.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5" } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "through2", "version": "0.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "eb3284da4ea311b6cc8ace3653748a52abf25a3f" } ], "purl": "pkg:npm/through2@0.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/through2/-/through2-0.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/through2@0.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/through2/-/through2-0.2.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "xtend", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6efecc2a4dad8e6962c4901b337ce7ba87b5d28b" } ], "purl": "pkg:npm/xtend@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/xtend/-/xtend-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/xtend@2.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/xtend/-/xtend-2.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object-keys", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "28a6aae7428dd2c3a92f3d95f21335dd204e0336" } ], "purl": "pkg:npm/object-keys@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-keys/-/object-keys-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@0.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-keys/-/object-keys-0.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tape", "version": "4.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0188641150e4fa28ba791114190733f47e3743bf" } ], "purl": "pkg:npm/tape@4.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tape/-/tape-4.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tape@4.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tape/-/tape-4.6.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/tape" }, { "name": "cdx:npm:bin", "value": "tape" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "deep-equal", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5" } ], "purl": "pkg:npm/deep-equal@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "defined", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c98d9bcef75674188e110969151199e39b1fa693" } ], "purl": "pkg:npm/defined@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/defined@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "function-bind", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0" } ], "purl": "pkg:npm/function-bind@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "211bafaf49e525b8cd93260d14ab136152b3f57a" } ], "purl": "pkg:npm/glob@7.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf" } ], "purl": "pkg:npm/has@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "1.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f" } ], "purl": "pkg:npm/minimist@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object-inspect", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c82115e4fcc888aea14d64c22e4f17f6a70d5e5a" } ], "purl": "pkg:npm/object-inspect@1.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" } ], "purl": "pkg:npm/resolve@1.1.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string.prototype.trim", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d04de2c89e137f4d7d206f086b5ed2fae6be8cea" } ], "purl": "pkg:npm/string.prototype.trim@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trim@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "define-properties", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d" } ], "purl": "pkg:npm/define-properties@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/define-properties@1.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object-keys", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c" } ], "purl": "pkg:npm/object-keys@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "es-abstract", "version": "1.17.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "16bf3d6ce377585c948b912f01e238f104d65f40327a41a02c0f07f9cfbb7db7c2909c1159130b77c09079d344c89ba8618866b44a98f76a60b5ed4502106587" } ], "purl": "pkg:npm/es-abstract@1.17.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.17.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/es-abstract@1.17.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.17.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "es-to-primitive", "version": "1.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4023a5960649b5a528f6689805c2c285351a1cd8c91773d8b35562743ec0c22123d6463129e41372d2c07b300e1f964a447d20d8880f9fa2b0078213f22469bc" } ], "purl": "pkg:npm/es-to-primitive@1.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/es-to-primitive@1.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-callable", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a72543f406862f1b60eacadbd8d83aca7589aa41d4f5b10cd3cec029c934c3c4300daad37cd729218a14f31f07bf621c9bcbba90524cd7c0da83c972a8692f8b" } ], "purl": "pkg:npm/is-callable@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-date-object", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5129434f9db8c28434f1aa19173877fd9e9c87d63f1165c41d0fc06913744a42aae2dd89c36476df7f6d4979b0b95a18ecb2e50426ce225c769b23ff2f9ce4d2" } ], "purl": "pkg:npm/is-date-object@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-date-object@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-symbol", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3b08a385a45282abe19bfd19740717359b7d95874a1697110d3e542d4b985cfa13efde1434e754fa0a53e91ce8edbe15d87525fe8a7a1aa63cf78019c2ff5f69" } ], "purl": "pkg:npm/is-symbol@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-symbol@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-symbols", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3cb72ca2abbef9d98421907eeada2d3452aaffb0e8f99d2ee284f4cca389365de560aeaf1b0c2eda18c7b3eebc38465b4e389413d6e03800576cffc6beb4b42a" } ], "purl": "pkg:npm/has-symbols@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-symbols@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-regex", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "888f7b33c2935880f695ae6e6179646d20d0220e05ea8d6c61ba1928a4c3a670d030bb542fceb3c618037addd0d92ae2698b321aa67a327d928db44a78b1ddab" } ], "purl": "pkg:npm/is-regex@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object-inspect", "version": "1.8.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8cb76d10e075d767ce46eca903297fe7455154804875540e494506407cc9e310526e2b7cd7345aaf3ec64e1904159cb545c798ad661c3dc0453d0c07c8073580" } ], "purl": "pkg:npm/object-inspect@1.8.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.8.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.8.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.8.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object.assign", "version": "4.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7b11c97aaea404a8f9f26a86c9343d0c5beb642fde47a3b0c73a0cf58468181aab5d8a27685c8688532e73d559ad77fb0daaeb784c0ca6eac6ddd77e08dc96e7" } ], "purl": "pkg:npm/object.assign@4.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object.assign@4.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string.prototype.trimend", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2d13f1154693b69a98b1378d29a14ec374786f123358e9db43cdfb41f072968f23231b5c6cafc0fec315ed0f8e015fef5a8fbbb36e69384d742984a36923b4ea" } ], "purl": "pkg:npm/string.prototype.trimend@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trimend@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string.prototype.trimstart", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5f1667f90a6fac123514e720e9d229c543e05823ee357bcc0fbd9a69169442fd5e0f87bf432f22fe11537b4054983eb4a7f400e9b8756af9ae3d37cd8ea55647" } ], "purl": "pkg:npm/string.prototype.trimstart@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/detect-file@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-extglob@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/is-glob@4.0.1", "dependsOn": [ "pkg:npm/is-extglob@2.1.1" ] }, { "ref": "pkg:npm/is-number@7.0.0", "dependsOn": [] }, { "ref": "pkg:npm/to-regex-range@5.0.1", "dependsOn": [ "pkg:npm/is-number@7.0.0" ] }, { "ref": "pkg:npm/fill-range@7.0.1", "dependsOn": [ "pkg:npm/to-regex-range@5.0.1" ] }, { "ref": "pkg:npm/braces@3.0.2", "dependsOn": [ "pkg:npm/fill-range@7.0.1" ] }, { "ref": "pkg:npm/picomatch@2.2.2", "dependsOn": [] }, { "ref": "pkg:npm/micromatch@4.0.2", "dependsOn": [ "pkg:npm/braces@3.0.2", "pkg:npm/picomatch@2.2.2" ] }, { "ref": "pkg:npm/parse-passwd@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/homedir-polyfill@1.0.3", "dependsOn": [ "pkg:npm/parse-passwd@1.0.0" ] }, { "ref": "pkg:npm/expand-tilde@2.0.2", "dependsOn": [ "pkg:npm/homedir-polyfill@1.0.3" ] }, { "ref": "pkg:npm/ini@1.3.8", "dependsOn": [] }, { "ref": "pkg:npm/is-windows@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isexe@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/which@1.3.1", "dependsOn": [ "pkg:npm/isexe@2.0.0" ] }, { "ref": "pkg:npm/global-prefix@1.0.2", "dependsOn": [ "pkg:npm/expand-tilde@2.0.2", "pkg:npm/homedir-polyfill@1.0.3", "pkg:npm/ini@1.3.8", "pkg:npm/is-windows@1.0.2", "pkg:npm/which@1.3.1" ] }, { "ref": "pkg:npm/global-modules@1.0.0", "dependsOn": [ "pkg:npm/global-prefix@1.0.2", "pkg:npm/is-windows@1.0.2", "pkg:npm/resolve-dir@1.0.1" ] }, { "ref": "pkg:npm/resolve-dir@1.0.1", "dependsOn": [ "pkg:npm/expand-tilde@2.0.2", "pkg:npm/global-modules@1.0.0" ] }, { "ref": "pkg:npm/findup-sync@4.0.0", "dependsOn": [ "pkg:npm/detect-file@1.0.0", "pkg:npm/is-glob@4.0.1", "pkg:npm/micromatch@4.0.2", "pkg:npm/resolve-dir@1.0.1" ] }, { "ref": "pkg:npm/merge@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/defined@0.0.0", "dependsOn": [] }, { "ref": "pkg:npm/duplexer@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/minimist@0.0.5", "dependsOn": [] }, { "ref": "pkg:npm/sprintf@0.1.5", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@0.10.31", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.1.14", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.4", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/tap-parser@0.4.3", "dependsOn": [ "pkg:npm/inherits@2.0.4", "pkg:npm/readable-stream@1.1.14" ] }, { "ref": "pkg:npm/deep-equal@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/jsonify@0.0.0", "dependsOn": [] }, { "ref": "pkg:npm/through@2.3.8", "dependsOn": [] }, { "ref": "pkg:npm/resumer@0.0.0", "dependsOn": [ "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/tape@2.3.3", "dependsOn": [ "pkg:npm/deep-equal@0.1.2", "pkg:npm/defined@0.0.0", "pkg:npm/inherits@2.0.4", "pkg:npm/jsonify@0.0.0", "pkg:npm/resumer@0.0.0", "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/object-keys@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/xtend@2.1.2", "dependsOn": [ "pkg:npm/object-keys@0.4.0" ] }, { "ref": "pkg:npm/through2@0.2.3", "dependsOn": [ "pkg:npm/readable-stream@1.1.14", "pkg:npm/xtend@2.1.2" ] }, { "ref": "pkg:npm/faucet@0.0.1", "dependsOn": [ "pkg:npm/defined@0.0.0", "pkg:npm/duplexer@0.1.1", "pkg:npm/minimist@0.0.5", "pkg:npm/sprintf@0.1.5", "pkg:npm/tap-parser@0.4.3", "pkg:npm/tape@2.3.3", "pkg:npm/through2@0.2.3" ] }, { "ref": "pkg:npm/deep-equal@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/defined@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/function-bind@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.0.6", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/has@1.0.3", "dependsOn": [ "pkg:npm/function-bind@1.1.1" ] }, { "ref": "pkg:npm/minimist@1.2.5", "dependsOn": [] }, { "ref": "pkg:npm/object-inspect@1.2.2", "dependsOn": [] }, { "ref": "pkg:npm/resolve@1.1.7", "dependsOn": [] }, { "ref": "pkg:npm/object-keys@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/define-properties@1.1.3", "dependsOn": [ "pkg:npm/object-keys@1.1.1" ] }, { "ref": "pkg:npm/is-callable@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/is-date-object@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/has-symbols@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/is-symbol@1.0.3", "dependsOn": [ "pkg:npm/has-symbols@1.0.1" ] }, { "ref": "pkg:npm/es-to-primitive@1.2.1", "dependsOn": [ "pkg:npm/is-callable@1.2.0", "pkg:npm/is-date-object@1.0.2", "pkg:npm/is-symbol@1.0.3" ] }, { "ref": "pkg:npm/is-regex@1.1.0", "dependsOn": [ "pkg:npm/has-symbols@1.0.1" ] }, { "ref": "pkg:npm/object-inspect@1.8.0", "dependsOn": [] }, { "ref": "pkg:npm/object.assign@4.1.0", "dependsOn": [ "pkg:npm/define-properties@1.1.3", "pkg:npm/function-bind@1.1.1", "pkg:npm/has-symbols@1.0.1", "pkg:npm/object-keys@1.1.1" ] }, { "ref": "pkg:npm/string.prototype.trimend@1.0.1", "dependsOn": [ "pkg:npm/define-properties@1.1.3", "pkg:npm/es-abstract@1.17.6" ] }, { "ref": "pkg:npm/string.prototype.trimstart@1.0.1", "dependsOn": [ "pkg:npm/define-properties@1.1.3", "pkg:npm/es-abstract@1.17.6" ] }, { "ref": "pkg:npm/es-abstract@1.17.6", "dependsOn": [ "pkg:npm/es-to-primitive@1.2.1", "pkg:npm/function-bind@1.1.1", "pkg:npm/has-symbols@1.0.1", "pkg:npm/has@1.0.3", "pkg:npm/is-callable@1.2.0", "pkg:npm/is-regex@1.1.0", "pkg:npm/object-inspect@1.8.0", "pkg:npm/object-keys@1.1.1", "pkg:npm/object.assign@4.1.0", "pkg:npm/string.prototype.trimend@1.0.1", "pkg:npm/string.prototype.trimstart@1.0.1" ] }, { "ref": "pkg:npm/string.prototype.trim@1.1.2", "dependsOn": [ "pkg:npm/define-properties@1.1.3", "pkg:npm/es-abstract@1.17.6", "pkg:npm/function-bind@1.1.1" ] }, { "ref": "pkg:npm/tape@4.6.0", "dependsOn": [ "pkg:npm/deep-equal@1.0.1", "pkg:npm/defined@1.0.0", "pkg:npm/function-bind@1.1.1", "pkg:npm/glob@7.0.6", "pkg:npm/has@1.0.3", "pkg:npm/inherits@2.0.4", "pkg:npm/minimist@1.2.5", "pkg:npm/object-inspect@1.2.2", "pkg:npm/resolve@1.1.7", "pkg:npm/resumer@0.0.0", "pkg:npm/string.prototype.trim@1.1.2", "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/find-node-modules@2.1.3", "dependsOn": [ "pkg:npm/faucet@0.0.1", "pkg:npm/findup-sync@4.0.0", "pkg:npm/merge@2.1.1", "pkg:npm/tape@4.6.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/find-node-modules@2.1.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-25T17:30:28Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, September 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'find-node-modules' with version '2.1.3'." } ] }