{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:3709df86-2ec2-405a-a99e-7169b4eec71b", "version": 1, "metadata": { "timestamp": "2026-10-01T13:24:50Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "codemod", "group": "@next", "version": "15.5.23-tuxcare.1", "purl": "pkg:npm/%40next/codemod@15.5.23-tuxcare.1", "bom-ref": "pkg:npm/@next/codemod@15.5.23-tuxcare.1", "properties": [ { "name": "cdx:npm:bin", "value": "./bin/next-codemod.js" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, dev, test, test:upgrade-fixture" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@types/find-up/package.json\\nnode_modules/@types/jscodeshift/package.json\\nnode_modules/@types/prompts/package.json\\nnode_modules/@types/semver/package.json\\nnode_modules/cheerio/package.json\\nnode_modules/commander/package.json\\nnode_modules/execa/package.json\\nnode_modules/find-up/package.json\\nnode_modules/globby/package.json\\nnode_modules/is-git-clean/package.json\\nnode_modules/jscodeshift/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/prompts/package.json\\nnode_modules/semver/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.8.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.8.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.0", "description": "Strip ANSI escape codes from a string", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "ImportedModules", "value": "strip-ansi" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ], "occurrences": [ { "location": "bin/transform.js", "line": 11 }, { "location": "bin/transform.ts", "line": 4 }, { "location": "bin/transform.ts", "line": 209 } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.6.3", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.6.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver,satisfies,semver/satisfies,compare,semver/compare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "bin/upgrade.js", "line": 43 }, { "location": "bin/upgrade.ts", "line": 7 }, { "location": "bin/upgrade.ts", "line": 117 }, { "location": "bin/upgrade.ts", "line": 124 }, { "location": "bin/upgrade.ts", "line": 152 }, { "location": "bin/upgrade.ts", "line": 188 }, { "location": "bin/upgrade.ts", "line": 204 }, { "location": "bin/upgrade.ts", "line": 205 }, { "location": "bin/upgrade.ts", "line": 434 }, { "location": "bin/upgrade.ts", "line": 512 }, { "location": "bin/upgrade.ts", "line": 520 }, { "location": "bin/upgrade.ts", "line": 700 } ] } }, { "authors": [ { "name": "Terkel Gjervig (https://terkel.com)" } ], "group": "", "name": "prompts", "version": "2.4.2", "description": "Lightweight, beautiful and user-friendly prompts", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prompts@2.4.2", "type": "library", "bom-ref": "pkg:npm/prompts@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/prompts/package.json" }, { "name": "ImportedModules", "value": "prompts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prompts/package.json" } ], "concludedValue": "node_modules/prompts/package.json" } ], "occurrences": [ { "location": "bin/transform.js", "line": 10 }, { "location": "bin/upgrade.js", "line": 41 }, { "location": "bin/transform.ts", "line": 3 }, { "location": "bin/transform.ts", "line": 49 }, { "location": "bin/transform.ts", "line": 62 }, { "location": "bin/transform.ts", "line": 84 }, { "location": "bin/transform.ts", "line": 215 }, { "location": "bin/upgrade.ts", "line": 2 }, { "location": "bin/upgrade.ts", "line": 159 }, { "location": "bin/upgrade.ts", "line": 459 }, { "location": "bin/upgrade.ts", "line": 484 }, { "location": "bin/upgrade.ts", "line": 535 }, { "location": "bin/upgrade.ts", "line": 556 }, { "location": "bin/upgrade.ts", "line": 570 } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.0.0", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.0.0", "type": "library", "bom-ref": "pkg:npm/picocolors@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "ImportedModules", "value": "picocolors,yellow,picocolors/yellow,white,picocolors/white,bold,picocolors/bold,picocolors/red,green,picocolors/green,magenta,picocolors/magenta" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ], "occurrences": [ { "location": "bin/upgrade.js", "line": 46 }, { "location": "lib/install.js", "line": 8 }, { "location": "lib/utils.js", "line": 9 }, { "location": "transforms/next-lint-to-eslint-cli.js", "line": 12 }, { "location": "bin/upgrade.ts", "line": 10 }, { "location": "bin/upgrade.ts", "line": 66 }, { "location": "bin/upgrade.ts", "line": 67 }, { "location": "bin/upgrade.ts", "line": 73 }, { "location": "bin/upgrade.ts", "line": 119 }, { "location": "bin/upgrade.ts", "line": 126 }, { "location": "bin/upgrade.ts", "line": 314 }, { "location": "bin/upgrade.ts", "line": 359 }, { "location": "bin/upgrade.ts", "line": 439 }, { "location": "bin/upgrade.ts", "line": 450 }, { "location": "bin/upgrade.ts", "line": 463 }, { "location": "bin/upgrade.ts", "line": 481 }, { "location": "bin/upgrade.ts", "line": 539 }, { "location": "bin/upgrade.ts", "line": 682 }, { "location": "bin/upgrade.ts", "line": 719 }, { "location": "bin/upgrade.ts", "line": 726 }, { "location": "bin/upgrade.ts", "line": 731 }, { "location": "lib/install.ts", "line": 2 }, { "location": "lib/install.ts", "line": 73 }, { "location": "lib/install.ts", "line": 75 }, { "location": "lib/utils.ts", "line": 1 }, { "location": "lib/utils.ts", "line": 22 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 5 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 8 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 9 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 10 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 12 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 13 }, { "location": "transforms/next-lint-to-eslint-cli.ts", "line": 14 } ] } }, { "authors": [ { "name": "Felix Kling" } ], "group": "", "name": "jscodeshift", "version": "17.0.0", "description": "A toolkit for JavaScript codemods", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jscodeshift@17.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/facebook/jscodeshift.git" } ], "type": "library", "bom-ref": "pkg:npm/jscodeshift@17.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jscodeshift/package.json" }, { "name": "ImportedModules", "value": "jscodeshift,jscodeshift/parser/babylon,jscodeshift/parser/tsOptions,jscodeshift/src/Runner,jscodeshift/API,FileInfo,jscodeshift/FileInfo,Options,jscodeshift/Options,JSXElement,jscodeshift/JSXElement,Collection,jscodeshift/Collection,JSCodeshift,jscodeshift/JSCodeshift,ASTPath,jscodeshift/ASTPath,CallExpression,jscodeshift/CallExpression,ObjectPattern,jscodeshift/ObjectPattern,Identifier,jscodeshift/Identifier,ArrowFunctionExpression,jscodeshift/ArrowFunctionExpression,ExportDefaultDeclaration,jscodeshift/ExportDefaultDeclaration,ExportNamedDeclaration,jscodeshift/ExportNamedDeclaration,FunctionDeclaration,jscodeshift/FunctionDeclaration,FunctionExpression,jscodeshift/FunctionExpression,ObjectExpression,jscodeshift/ObjectExpression,Property,jscodeshift/Property,ObjectProperty,jscodeshift/ObjectProperty,SpreadElement,jscodeshift/SpreadElement,SpreadProperty,jscodeshift/SpreadProperty,ObjectMethod,jscodeshift/ObjectMethod,ImportDefaultSpecifier,jscodeshift/ImportDefaultSpecifier,JSXAttribute,jscodeshift/JSXAttribute,Node,jscodeshift/Node,ImportSpecifier,jscodeshift/ImportSpecifier" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jscodeshift/package.json" } ], "concludedValue": "node_modules/jscodeshift/package.json" } ], "occurrences": [ { "location": "lib/parser.js", "line": 7 }, { "location": "lib/parser.js", "line": 8 }, { "location": "lib/parser.js", "line": 9 }, { "location": "lib/run-jscodeshift.js", "line": 8 }, { "location": "lib/cra-to-next/global-css-transform.ts", "line": 2 }, { "location": "lib/cra-to-next/index-to-component.ts", "line": 1 }, { "location": "lib/parser.ts", "line": 1 }, { "location": "lib/parser.ts", "line": 2 }, { "location": "lib/parser.ts", "line": 3 }, { "location": "lib/parser.ts", "line": 16 }, { "location": "lib/parser.ts", "line": 23 }, { "location": "lib/run-jscodeshift.ts", "line": 2 }, { "location": "transforms/add-missing-react-import.ts", "line": 7 }, { "location": "transforms/app-dir-runtime-config-experimental-edge.ts", "line": 1 }, { "location": "transforms/built-in-next-font.ts", "line": 1 }, { "location": "transforms/lib/async-request-api/index.ts", "line": 1 }, { "location": "transforms/lib/async-request-api/next-async-dynamic-api.ts", "line": 1 }, { "location": "transforms/lib/async-request-api/next-async-dynamic-prop.ts", "line": 7 }, { "location": "transforms/lib/async-request-api/utils.ts", "line": 10 }, { "location": "transforms/lib/utils.ts", "line": 1 }, { "location": "transforms/metadata-to-viewport-export.ts", "line": 1 }, { "location": "transforms/name-default-component.ts", "line": 9 }, { "location": "transforms/new-link.ts", "line": 4 }, { "location": "transforms/next-experimental-turbo-to-turbopack.ts", "line": 20 }, { "location": "transforms/next-image-experimental.ts", "line": 11 }, { "location": "transforms/next-image-to-legacy-image.ts", "line": 1 }, { "location": "transforms/next-og-import.ts", "line": 1 }, { "location": "transforms/next-request-geo-ip.ts", "line": 10 }, { "location": "lib/run-jscodeshift.ts", "line": 11 } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "is-git-clean", "version": "1.1.0", "description": "Find out if a git directory is clean or not", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-git-clean@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-git-clean@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-git-clean/package.json" }, { "name": "ImportedModules", "value": "is-git-clean" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-git-clean/package.json" } ], "concludedValue": "node_modules/is-git-clean/package.json" } ], "occurrences": [ { "location": "lib/utils.js", "line": 10 }, { "location": "lib/utils.ts", "line": 2 }, { "location": "lib/utils.ts", "line": 8 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "globby", "version": "11.0.1", "description": "User-friendly glob matching", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globby@11.0.1", "type": "library", "bom-ref": "pkg:npm/globby@11.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/globby/package.json" }, { "name": "ImportedModules", "value": "globby" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globby/package.json" } ], "concludedValue": "node_modules/globby/package.json" } ], "occurrences": [ { "location": "bin/transform.js", "line": 9 }, { "location": "transforms/cra-to-next.js", "line": 10 }, { "location": "bin/transform.ts", "line": 2 }, { "location": "bin/transform.ts", "line": 18 }, { "location": "transforms/cra-to-next.ts", "line": 4 }, { "location": "transforms/cra-to-next.ts", "line": 67 }, { "location": "transforms/cra-to-next.ts", "line": 71 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "4.1.0", "description": "Find a file or directory by walking up parent directories", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@4.1.0", "type": "library", "bom-ref": "pkg:npm/find-up@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "ImportedModules", "value": "find-up" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ], "occurrences": [ { "location": "lib/handle-package.js", "line": 11 }, { "location": "lib/handle-package.ts", "line": 1 }, { "location": "lib/handle-package.ts", "line": 9 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "4.0.3", "description": "Process execution for humans", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@4.0.3", "type": "library", "bom-ref": "pkg:npm/execa@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "ImportedModules", "value": "execa" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ], "occurrences": [ { "location": "bin/transform.js", "line": 8 }, { "location": "lib/handle-package.js", "line": 12 }, { "location": "transforms/cra-to-next.js", "line": 9 }, { "location": "bin/transform.ts", "line": 1 }, { "location": "bin/transform.ts", "line": 154 }, { "location": "lib/handle-package.ts", "line": 2 }, { "location": "lib/handle-package.ts", "line": 54 }, { "location": "lib/handle-package.ts", "line": 106 }, { "location": "lib/handle-package.ts", "line": 124 }, { "location": "transforms/cra-to-next.ts", "line": 3 }, { "location": "transforms/cra-to-next.ts", "line": 154 } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "12.1.0", "description": "the complete solution for node.js command-line programs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@12.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@12.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "ImportedModules", "value": "commander,Command,commander/Command" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ], "occurrences": [ { "location": "bin/next-codemod.js", "line": 13 }, { "location": "bin/next-codemod.ts", "line": 12 } ] } }, { "authors": [ { "name": "Matt Mueller (mat.io)" } ], "group": "", "name": "cheerio", "version": "1.0.0-rc.9", "description": "Tiny, fast, and elegant implementation of core jQuery designed specifically for the server", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cheerio@1.0.0-rc.9", "externalReferences": [ { "type": "website", "url": "https://cheerio.js.org/" }, { "type": "vcs", "url": "git://github.com/cheeriojs/cheerio.git" } ], "type": "library", "bom-ref": "pkg:npm/cheerio@1.0.0-rc.9", "properties": [ { "name": "SrcFile", "value": "node_modules/cheerio/package.json" }, { "name": "ImportedModules", "value": "cheerio" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cheerio/package.json" } ], "concludedValue": "node_modules/cheerio/package.json" } ], "occurrences": [ { "location": "transforms/cra-to-next.js", "line": 11 }, { "location": "transforms/cra-to-next.ts", "line": 5 }, { "location": "transforms/cra-to-next.ts", "line": 186 } ] } }, { "group": "@types", "name": "semver", "version": "7.3.1", "description": "TypeScript definitions for semver", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/semver@7.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/semver@7.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/semver/package.json" } ], "concludedValue": "node_modules/@types/semver/package.json" } ] } }, { "group": "@types", "name": "prompts", "version": "2.4.2", "description": "TypeScript definitions for prompts", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/prompts@2.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/prompts" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/prompts@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/prompts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/prompts/package.json" } ], "concludedValue": "node_modules/@types/prompts/package.json" } ] } }, { "group": "@types", "name": "jscodeshift", "version": "0.11.0", "description": "TypeScript definitions for jscodeshift", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/jscodeshift@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/jscodeshift@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/jscodeshift/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/jscodeshift/package.json" } ], "concludedValue": "node_modules/@types/jscodeshift/package.json" } ] } }, { "group": "@types", "name": "find-up", "version": "4.0.0", "description": "Stub TypeScript definitions entry for find-up, which provides its own types definitions", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/find-up@4.0.0", "type": "library", "bom-ref": "pkg:npm/@types/find-up@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/find-up/package.json" } ], "concludedValue": "node_modules/@types/find-up/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@next/codemod@15.5.23-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-01T13:24:50Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 1, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'codemod' with version '15.5.23-tuxcare.1'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 16 source files." } ] }