{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:e72f1007-c4a2-4a87-9806-ddaf6bbff9e9", "version": 1, "metadata": { "timestamp": "2026-10-07T16:10:59Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "guard", "group": "@arcjet", "version": "1.14.1", "description": "Arcjet Guards SDK — AI guardrails for rate limiting, prompt injection detection, and sensitive info detection", "purl": "pkg:npm/%40arcjet/guard@1.14.1", "bom-ref": "pkg:npm/@arcjet/guard@1.14.1", "author": "Arcjet (https://arcjet.com)", "properties": [ { "name": "cdx:npm:scripts", "value": "build, typecheck, lint, format, format:check, test, test-unit, validate-skills, stale-skills, test-peers-absent, test-runtime-node, test-runtime-fetch, test-runtime-deno, test-runtime-bun, test-runtime-cloudflare" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://arcjet.com" }, { "type": "vcs", "url": "git+https://github.com/arcjet/arcjet-js.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@modelcontextprotocol\\n@poppinss\\n@sindresorhus\\n@speed-highlight\\n@strands-agents\\n@tanstack" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@modelcontextprotocol/sdk/package.json\\nnode_modules/@strands-agents/sdk/package.json\\nnode_modules/@tanstack/ai/package.json\\nnode_modules/crossws/package.json\\nnode_modules/env-runner/package.json\\nnode_modules/eve/node_modules/db0/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/colors/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/dumper/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/exception/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/@sindresorhus/is/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/@speed-highlight/core/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/cookie-es/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/croner/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/defu/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/destr/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/error-stack-parser-es/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/get-port-please/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/kleur/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/rendu/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/scule/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/source-map/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/supports-color/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/ufo/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/unctx/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/youch-core/package.json\\nnode_modules/eve/node_modules/nitro/dist/node_modules/youch/package.json\\nnode_modules/eve/node_modules/nitro/package.json\\nnode_modules/eve/node_modules/undici/package.json\\nnode_modules/eve/node_modules/unstorage/package.json\\nnode_modules/eve/package.json\\nnode_modules/h3/package.json\\nnode_modules/ocache/package.json\\nnode_modules/ofetch/package.json\\nnode_modules/rou3/package.json\\nnode_modules/srvx/package.json\\nnode_modules/uuid/package.json" } ] }, "components": [ { "group": "", "name": "uuid", "version": "14.0.2", "description": "RFC9562 UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@14.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@14.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "group": "", "name": "srvx", "version": "0.11.22", "description": "Universal Server.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/srvx@0.11.22", "externalReferences": [ { "type": "website", "url": "https://srvx.h3.dev" } ], "type": "library", "bom-ref": "pkg:npm/srvx@0.11.22", "properties": [ { "name": "SrcFile", "value": "node_modules/srvx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/srvx/package.json" } ], "concludedValue": "node_modules/srvx/package.json" } ] } }, { "group": "", "name": "rou3", "version": "0.8.1", "description": "Lightweight and fast router for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rou3@0.8.1", "type": "library", "bom-ref": "pkg:npm/rou3@0.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rou3/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rou3/package.json" } ], "concludedValue": "node_modules/rou3/package.json" } ] } }, { "group": "", "name": "ofetch", "version": "2.0.0-alpha.3", "description": "A better fetch API. Works on node, browser and workers.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ofetch@2.0.0-alpha.3", "type": "library", "bom-ref": "pkg:npm/ofetch@2.0.0-alpha.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ofetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ofetch/package.json" } ], "concludedValue": "node_modules/ofetch/package.json" } ] }, "tags": [ "api" ] }, { "group": "", "name": "ocache", "version": "0.1.5", "description": "Standalone caching utilities with TTL, SWR, and HTTP response caching", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ocache@0.1.5", "type": "library", "bom-ref": "pkg:npm/ocache@0.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/ocache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ocache/package.json" } ], "concludedValue": "node_modules/ocache/package.json" } ] } }, { "group": "", "name": "h3", "version": "2.0.1-rc.22", "description": "Minimal H(TTP) framework built for high performance and portability.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/h3@2.0.1-rc.22", "externalReferences": [ { "type": "website", "url": "https://h3.dev" } ], "type": "framework", "bom-ref": "pkg:npm/h3@2.0.1-rc.22", "properties": [ { "name": "SrcFile", "value": "node_modules/h3/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/h3/package.json" } ], "concludedValue": "node_modules/h3/package.json" } ] }, "tags": [ "framework", "performance" ] }, { "group": "", "name": "eve", "version": "0.46.0", "description": "Filesystem-first framework for durable backend AI agents that run anywhere.", "scope": "excluded", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eve@0.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vercel/eve#readme" }, { "type": "vcs", "url": "git+https://github.com/vercel/eve.git" } ], "type": "framework", "bom-ref": "pkg:npm/eve@0.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/package.json" }, { "name": "ImportedModules", "value": "eve/tools/approval,Approval,eve/tools/approval/Approval,ApprovalContext,eve/tools/approval/ApprovalContext,ApprovalStatus,eve/tools/approval/ApprovalStatus,eve/context,SessionContext,eve/context/SessionContext,eve/tools,ToolDefinition,eve/tools/ToolDefinition,ToolContext,eve/tools/ToolContext,eve/hooks,HookContext,eve/hooks/HookContext,HookDefinition,eve/hooks/HookDefinition,HookEventMap,eve/hooks/HookEventMap,StreamEventHook,eve/hooks/StreamEventHook" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/package.json" } ], "concludedValue": "node_modules/eve/package.json" } ], "occurrences": [ { "location": "src/vercel-eve/v0/approval-types.ts", "line": 1 }, { "location": "src/vercel-eve/v0/context.ts", "line": 1 }, { "location": "src/vercel-eve/v0/guard-approval.ts", "line": 1 }, { "location": "src/vercel-eve/v0/guard-tool.ts", "line": 1 }, { "location": "src/vercel-eve/v0/hooks.ts", "line": 1 } ] }, "tags": [ "ai", "framework" ] }, { "group": "", "name": "unstorage", "version": "2.0.0-alpha.7", "description": "Universal Storage Layer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unstorage@2.0.0-alpha.7", "externalReferences": [ { "type": "website", "url": "https://unstorage.unjs.io" } ], "type": "library", "bom-ref": "pkg:npm/unstorage@2.0.0-alpha.7", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/unstorage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/unstorage/package.json" } ], "concludedValue": "node_modules/eve/node_modules/unstorage/package.json" } ] } }, { "group": "", "name": "undici", "version": "8.9.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@8.9.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@8.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/undici/package.json" } ], "concludedValue": "node_modules/eve/node_modules/undici/package.json" } ] } }, { "group": "", "name": "nitro", "version": "3.0.260610-beta", "description": "Build and Deploy Universal JavaScript Servers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nitro@3.0.260610-beta", "externalReferences": [ { "type": "website", "url": "https://nitro.build" } ], "type": "library", "bom-ref": "pkg:npm/nitro@3.0.260610-beta", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/package.json" } ] } }, { "authors": [ { "name": "Harminder Virk " } ], "group": "", "name": "youch-core", "version": "0.3.3", "description": "Error parser to parse an error instance into a collection of frames", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/youch-core@0.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/poppinss/youch-core#readme" }, { "type": "vcs", "url": "git+https://github.com/poppinss/youch-core.git" } ], "type": "library", "bom-ref": "pkg:npm/youch-core@0.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/youch-core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/youch-core/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/youch-core/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Harminder Virk " } ], "group": "", "name": "youch", "version": "4.1.1", "description": "Pretty print JavaScript errors on the Web and the Terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/youch@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/poppinss/youch#readme" }, { "type": "vcs", "url": "git+https://github.com/poppinss/youch.git" } ], "type": "library", "bom-ref": "pkg:npm/youch@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/youch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/youch/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/youch/package.json" } ] }, "tags": [ "web" ] }, { "group": "", "name": "unctx", "version": "2.5.0", "description": "Composition-api in Vanilla js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unctx@2.5.0", "type": "library", "bom-ref": "pkg:npm/unctx@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/unctx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/unctx/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/unctx/package.json" } ] } }, { "group": "", "name": "ufo", "version": "1.6.4", "description": "URL utils for humans", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ufo@1.6.4", "type": "library", "bom-ref": "pkg:npm/ufo@1.6.4", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/ufo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/ufo/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/ufo/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "10.2.2", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@10.2.2", "type": "library", "bom-ref": "pkg:npm/supports-color@10.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.7.6", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.7.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.7.6", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/source-map/package.json" } ] } }, { "group": "", "name": "scule", "version": "1.3.0", "description": "String case utils", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/scule@1.3.0", "type": "library", "bom-ref": "pkg:npm/scule@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/scule/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/scule/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/scule/package.json" } ] } }, { "group": "", "name": "rendu", "version": "0.1.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rendu@0.1.0", "type": "library", "bom-ref": "pkg:npm/rendu@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/rendu/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/rendu/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/rendu/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "kleur", "version": "4.1.5", "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kleur@4.1.5", "type": "library", "bom-ref": "pkg:npm/kleur@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/kleur/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/kleur/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/kleur/package.json" } ] } }, { "group": "", "name": "get-port-please", "version": "3.2.0", "description": "Get an available TCP port to listen", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-port-please@3.2.0", "type": "library", "bom-ref": "pkg:npm/get-port-please@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/get-port-please/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/get-port-please/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/get-port-please/package.json" } ] } }, { "group": "", "name": "error-stack-parser-es", "version": "1.0.5", "description": "Cross-browser Error parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-stack-parser-es@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu/error-stack-parser-es#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu/error-stack-parser-es.git" } ], "type": "library", "bom-ref": "pkg:npm/error-stack-parser-es@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/error-stack-parser-es/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/error-stack-parser-es/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/error-stack-parser-es/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "destr", "version": "2.0.5", "description": "A faster, secure and convenient alternative for JSON.parse", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/destr@2.0.5", "type": "library", "bom-ref": "pkg:npm/destr@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/destr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/destr/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/destr/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "defu", "version": "6.1.7", "description": "Recursively assign default properties. Lightweight and Fast!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defu@6.1.7", "type": "library", "bom-ref": "pkg:npm/defu@6.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/defu/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/defu/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/defu/package.json" } ] } }, { "authors": [ { "name": "Hexagon " } ], "group": "", "name": "croner", "version": "10.0.1", "description": "Trigger functions and/or evaluate cron expressions in JavaScript. No dependencies. Most features. All environments.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/croner@10.0.1", "externalReferences": [ { "type": "website", "url": "https://croner.56k.guru" }, { "type": "vcs", "url": "https://github.com/hexagon/croner" } ], "type": "library", "bom-ref": "pkg:npm/croner@10.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/croner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/croner/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/croner/package.json" } ] }, "tags": [ "cron" ] }, { "group": "", "name": "cookie-es", "version": "3.1.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cookie-es@3.1.1", "type": "library", "bom-ref": "pkg:npm/cookie-es@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/cookie-es/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/cookie-es/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/cookie-es/package.json" } ] } }, { "authors": [ { "name": "matubu (https://mathias.ninja)" } ], "group": "@speed-highlight", "name": "core", "version": "1.2.16", "description": "🌈 Light, fast, and easy to use, dependencies free javascript syntax highlighter, with automatic language detection", "scope": "optional", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40speed-highlight/core@1.2.16", "externalReferences": [ { "type": "vcs", "url": "https://github.com/speed-highlight/core#readme" }, { "type": "vcs", "url": "git://github.com/speed-highlight/core.git" } ], "type": "library", "bom-ref": "pkg:npm/@speed-highlight/core@1.2.16", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@speed-highlight/core/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@speed-highlight/core/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/@speed-highlight/core/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "is", "version": "7.2.0", "description": "Type check values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/is@7.2.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/is@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@sindresorhus/is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@sindresorhus/is/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/@sindresorhus/is/package.json" } ] } }, { "authors": [ { "name": "Harminder Virk " } ], "group": "@poppinss", "name": "exception", "version": "1.2.3", "description": "Utility to create custom exceptions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40poppinss/exception@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/poppinss/exception#readme" }, { "type": "vcs", "url": "git+https://github.com/poppinss/exception.git" } ], "type": "library", "bom-ref": "pkg:npm/@poppinss/exception@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/exception/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/exception/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/exception/package.json" } ] } }, { "authors": [ { "name": "Harminder Virk " } ], "group": "@poppinss", "name": "dumper", "version": "0.7.0", "description": "Pretty print JavaScript data types in the terminal and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40poppinss/dumper@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/poppinss/dumper#readme" }, { "type": "vcs", "url": "git+https://github.com/poppinss/dumper.git" } ], "type": "library", "bom-ref": "pkg:npm/@poppinss/dumper@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/dumper/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/dumper/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/dumper/package.json" } ] } }, { "authors": [ { "name": "virk" } ], "group": "@poppinss", "name": "colors", "version": "4.1.6", "description": "A wrapper on top of kleur with ability to write test against the color functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40poppinss/colors@4.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/poppinss/colors#readme" }, { "type": "vcs", "url": "git+https://github.com/poppinss/colors.git" } ], "type": "library", "bom-ref": "pkg:npm/@poppinss/colors@4.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/colors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/colors/package.json" } ], "concludedValue": "node_modules/eve/node_modules/nitro/dist/node_modules/@poppinss/colors/package.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "db0", "version": "0.3.4", "description": "Lightweight SQL Connector", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/db0@0.3.4", "type": "library", "bom-ref": "pkg:npm/db0@0.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/eve/node_modules/db0/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eve/node_modules/db0/package.json" } ], "concludedValue": "node_modules/eve/node_modules/db0/package.json" } ] }, "tags": [ "sql" ] }, { "group": "", "name": "env-runner", "version": "0.1.16", "description": "Generic environment runner for JavaScript runtimes.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-runner@0.1.16", "type": "library", "bom-ref": "pkg:npm/env-runner@0.1.16", "properties": [ { "name": "SrcFile", "value": "node_modules/env-runner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-runner/package.json" } ], "concludedValue": "node_modules/env-runner/package.json" } ] } }, { "group": "", "name": "crossws", "version": "0.4.12", "description": "Cross-platform WebSocket Servers for Node.js, Deno, Bun and Cloudflare Workers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crossws@0.4.12", "externalReferences": [ { "type": "website", "url": "https://crossws.h3.dev" } ], "type": "library", "bom-ref": "pkg:npm/crossws@0.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/crossws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crossws/package.json" } ], "concludedValue": "node_modules/crossws/package.json" } ] } }, { "authors": [ { "name": "Tanner Linsley" } ], "group": "@tanstack", "name": "ai", "version": "0.52.0", "description": "Type-safe TypeScript AI SDK for streaming chat, tool calling, agents, structured outputs, and multimodal generation.", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tanstack/ai@0.52.0", "externalReferences": [ { "type": "website", "url": "https://tanstack.com/ai" }, { "type": "vcs", "url": "git+https://github.com/TanStack/ai.git" } ], "type": "library", "bom-ref": "pkg:npm/@tanstack/ai@0.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@tanstack/ai/package.json" }, { "name": "ImportedModules", "value": "ai,jsonSchema,ai/jsonSchema,InferToolInput,ai/InferToolInput,InferToolOutput,ai/InferToolOutput,Tool,ai/Tool" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tanstack/ai/package.json" } ], "concludedValue": "node_modules/@tanstack/ai/package.json" } ], "occurrences": [ { "location": "dist/vercel-ai/v7/guard-tool.js", "line": 7 }, { "location": "dist/vercel-ai/v7/guard-tool.js", "line": 19 }, { "location": "src/vercel-ai/v7/guard-tool.ts", "line": 1 }, { "location": "src/vercel-ai/v7/guard-tool.ts", "line": 2 }, { "location": "src/vercel-ai/v7/guard-tool.ts", "line": 100 } ] }, "tags": [ "ai" ] }, { "authors": [ { "name": "Strands Agents" } ], "group": "@strands-agents", "name": "sdk", "version": "1.14.0", "description": "TypeScript SDK for Strands Agents framework", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40strands-agents/sdk@1.14.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/strands-agents/harness-sdk#readme" }, { "type": "vcs", "url": "git+https://github.com/strands-agents/harness-sdk.git" } ], "type": "framework", "bom-ref": "pkg:npm/@strands-agents/sdk@1.14.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@strands-agents/sdk/package.json" }, { "name": "ImportedModules", "value": "@strands-agents/sdk,Plugin,@strands-agents/sdk/Plugin" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@strands-agents/sdk/package.json" } ], "concludedValue": "node_modules/@strands-agents/sdk/package.json" } ], "occurrences": [ { "location": "dist/strands-agents/v1/hooks.js", "line": 24 }, { "location": "src/strands-agents/v1/hooks.ts", "line": 1 }, { "location": "src/strands-agents/v1/hooks.ts", "line": 145 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Anthropic" }, { "name": " PBC (https://anthropic.com)" } ], "group": "@modelcontextprotocol", "name": "sdk", "version": "1.30.1", "description": "Model Context Protocol implementation for TypeScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.30.1", "externalReferences": [ { "type": "website", "url": "https://modelcontextprotocol.io" }, { "type": "vcs", "url": "git+https://github.com/modelcontextprotocol/typescript-sdk.git" } ], "type": "library", "bom-ref": "pkg:npm/@modelcontextprotocol/sdk@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@modelcontextprotocol/sdk/package.json" }, { "name": "cdx:mcp:package", "value": "true" }, { "name": "cdx:mcp:official", "value": "true" }, { "name": "cdx:mcp:role", "value": "sdk" }, { "name": "cdx:mcp:catalogSource", "value": "official-sdk" }, { "name": "cdx:mcp:packageName", "value": "@modelcontextprotocol/sdk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "tags": [ "mcp", "mcp-sdk", "official-mcp-sdk", "trusted-source" ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@modelcontextprotocol/sdk/package.json" } ], "concludedValue": "node_modules/@modelcontextprotocol/sdk/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@arcjet/guard@1.14.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-07T16:10:59Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 7, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'guard' with version '1.14.1'. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from 36 source files." } ] }