{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:76886d51-dee6-45f1-93c4-6613e1696e65", "version": 1, "metadata": { "timestamp": "2026-10-10T23:00:19Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "assistant-ui", "group": "", "version": "0.0.121", "description": "CLI for assistant-ui", "purl": "pkg:npm/assistant-ui@0.0.121", "bom-ref": "pkg:npm/assistant-ui@0.0.121", "author": "AgentbaseAI Inc.", "properties": [ { "name": "cdx:npm:bin", "value": "assistant-ui" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, test, test:coverage, typecheck, test:watch" }, { "name": "cdx:npm:buildScripts", "value": "build, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://www.assistant-ui.com/" }, { "type": "vcs", "url": "git+https://github.com/assistant-ui/assistant-ui.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@assistant-ui\\n@clack\\n@types\\n@vitest" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@assistant-ui/agent-launcher/package.json\\nnode_modules/@assistant-ui/x-buildutils/package.json\\nnode_modules/@clack/prompts/package.json\\nnode_modules/@types/cli-progress/package.json\\nnode_modules/@types/cross-spawn/package.json\\nnode_modules/@types/debug/package.json\\nnode_modules/@types/jscodeshift/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/semver/package.json\\nnode_modules/@vitest/coverage-v8/package.json\\nnode_modules/aui-auth/package.json\\nnode_modules/chalk/package.json\\nnode_modules/cli-progress/package.json\\nnode_modules/commander/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/detect-package-manager/package.json\\nnode_modules/giget/package.json\\nnode_modules/glob/package.json\\nnode_modules/jscodeshift/package.json\\nnode_modules/jsonc-parser/package.json\\nnode_modules/react/package.json\\nnode_modules/semver/package.json\\nnode_modules/statewire/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "5.0.3", "description": "Next generation testing framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@5.0.3", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@5.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "statewire", "version": "0.19.4", "description": "State over the wire: snapshot-first delta streaming and command submission for any state and any command", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/statewire@0.19.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/assistant-ui/harness-sdk.git" } ], "type": "library", "bom-ref": "pkg:npm/statewire@0.19.4", "properties": [ { "name": "SrcFile", "value": "node_modules/statewire/package.json" }, { "name": "ImportedModules", "value": "statewire,StatewireClient,statewire/StatewireClient,StatewireHttp,statewire/StatewireHttp" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/statewire/package.json" } ], "concludedValue": "node_modules/statewire/package.json" } ], "occurrences": [ { "location": "dist/lib/cloud-setup-login.js", "line": 4 }, { "location": "dist/lib/cloud-setup-login.js", "line": 21 }, { "location": "src/lib/cloud-setup-login.ts", "line": 3 }, { "location": "src/lib/cloud-setup-login.ts", "line": 78 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver,compare,semver/compare,valid,semver/valid,satisfies,semver/satisfies" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "dist/commands/doctor.js", "line": 6 }, { "location": "dist/commands/doctor.js", "line": 168 }, { "location": "dist/commands/doctor.js", "line": 169 }, { "location": "dist/commands/doctor.js", "line": 171 }, { "location": "dist/commands/info.js", "line": 10 }, { "location": "dist/commands/info.js", "line": 137 }, { "location": "src/commands/doctor.ts", "line": 5 }, { "location": "src/commands/doctor.ts", "line": 263 }, { "location": "src/commands/doctor.ts", "line": 264 }, { "location": "src/commands/doctor.ts", "line": 266 }, { "location": "src/commands/info.ts", "line": 8 }, { "location": "src/commands/info.ts", "line": 220 } ] } }, { "group": "", "name": "react", "version": "19.3.0", "description": "React is a JavaScript library for building user interfaces.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react@19.3.0", "externalReferences": [ { "type": "website", "url": "https://react.dev/" }, { "type": "vcs", "url": "https://github.com/react/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@19.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "ImportedModules", "value": "react,useEffect,react/useEffect,useState,react/useState,useRef,react/useRef,useSyncExternalStore,react/useSyncExternalStore,PropsWithChildren,react/PropsWithChildren,react/FC,isValidElement,react/isValidElement,memo,react/memo,useCallback,react/useCallback,ComponentPropsWithRef,react/ComponentPropsWithRef,forwardRef,react/forwardRef" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ], "occurrences": [ { "location": "templates/cloud-harness/hooks/use-attachment-src.ts", "line": 3 }, { "location": "templates/cloud-harness/hooks/use-attachment-src.ts", "line": 8 }, { "location": "templates/cloud-harness/hooks/use-attachment-src.ts", "line": 12 }, { "location": "templates/cloud-harness/hooks/use-copy-to-clipboard.ts", "line": 3 }, { "location": "templates/cloud-harness/hooks/use-copy-to-clipboard.ts", "line": 12 }, { "location": "templates/cloud-harness/hooks/use-copy-to-clipboard.ts", "line": 13 }, { "location": "templates/cloud-harness/hooks/use-copy-to-clipboard.ts", "line": 16 }, { "location": "templates/cloud-harness/hooks/use-copy-to-clipboard.ts", "line": 18 }, { "location": "templates/cloud-harness/app/assistant.tsx", "line": 5 }, { "location": "templates/cloud-harness/app/assistant.tsx", "line": 64 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/attachment.aui.tsx", "line": 8 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/attachment.aui.tsx", "line": 46 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/attachment.aui.tsx", "line": 80 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/markdown-text.tsx", "line": 12 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/markdown-text.tsx", "line": 30 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/thread.aui.tsx", "line": 38 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 3 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 55 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 56 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 62 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 521 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 524 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 703 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 707 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 708 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 709 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 1088 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 1090 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tool-fallback.aui.tsx", "line": 1121 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tooltip-icon-button.tsx", "line": 3 }, { "location": "templates/cloud-harness/components/assistant-ui/elements/tooltip-icon-button.tsx", "line": 19 }, { "location": "templates/cloud-harness/components/ui/avatar.tsx", "line": 3 }, { "location": "templates/cloud-harness/components/ui/dialog.tsx", "line": 3 }, { "location": "templates/cloud-harness/components/ui/textarea.tsx", "line": 1 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corporation" } ], "group": "", "name": "jsonc-parser", "version": "3.3.1", "description": "Scanner and parser for JSON with comments.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonc-parser@3.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/node-jsonc-parser" } ], "type": "library", "bom-ref": "pkg:npm/jsonc-parser@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonc-parser/package.json" }, { "name": "ImportedModules", "value": "jsonc-parser,parse,jsonc-parser/parse,printParseErrorCode,jsonc-parser/printParseErrorCode,ParseError,jsonc-parser/ParseError" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonc-parser/package.json" } ], "concludedValue": "node_modules/jsonc-parser/package.json" } ], "occurrences": [ { "location": "dist/lib/create-project.js", "line": 9 }, { "location": "dist/lib/create-project.js", "line": 236 }, { "location": "dist/lib/create-project.js", "line": 238 }, { "location": "src/lib/create-project.ts", "line": 9 }, { "location": "src/lib/create-project.ts", "line": 383 }, { "location": "src/lib/create-project.ts", "line": 387 } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "Felix Kling" } ], "group": "", "name": "jscodeshift", "version": "17.4.0", "description": "A toolkit for JavaScript codemods", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jscodeshift@17.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/facebook/jscodeshift.git" } ], "type": "library", "bom-ref": "pkg:npm/jscodeshift@17.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jscodeshift/package.json" }, { "name": "ImportedModules", "value": "jscodeshift" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jscodeshift/package.json" } ], "concludedValue": "node_modules/jscodeshift/package.json" } ], "occurrences": [ { "location": "dist/lib/create-project.js", "line": 359 }, { "location": "src/lib/create-project.ts", "line": 582 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "required", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "ImportedModules", "value": "glob,sync,glob/sync" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ], "occurrences": [ { "location": "dist/lib/transform.js", "line": 4 }, { "location": "dist/lib/transform.js", "line": 18 }, { "location": "dist/lib/utils/file-scanner.js", "line": 3 }, { "location": "dist/lib/utils/file-scanner.js", "line": 6 }, { "location": "src/lib/transform.ts", "line": 6 }, { "location": "src/lib/transform.ts", "line": 25 }, { "location": "src/lib/utils/file-scanner.ts", "line": 3 }, { "location": "src/lib/utils/file-scanner.ts", "line": 15 } ] } }, { "group": "", "name": "giget", "version": "3.3.1", "description": "Download templates and git repositories with pleasure!", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/giget@3.3.1", "type": "library", "bom-ref": "pkg:npm/giget@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/giget/package.json" }, { "name": "ImportedModules", "value": "giget,downloadTemplate,giget/downloadTemplate" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/giget/package.json" } ], "concludedValue": "node_modules/giget/package.json" } ], "occurrences": [ { "location": "dist/lib/agent-skill.js", "line": 5 }, { "location": "dist/lib/agent-skill.js", "line": 61 }, { "location": "dist/lib/create-project.js", "line": 8 }, { "location": "dist/lib/create-project.js", "line": 111 }, { "location": "src/lib/agent-skill.ts", "line": 4 }, { "location": "src/lib/agent-skill.ts", "line": 82 }, { "location": "src/lib/create-project.ts", "line": 4 }, { "location": "src/lib/create-project.ts", "line": 187 } ] }, "tags": [ "templates" ] }, { "authors": [ { "name": "egoist <0x142857@gmail.com>" } ], "group": "", "name": "detect-package-manager", "version": "3.0.2", "description": "Detect which package manager you're using (yarn or npm)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-package-manager@3.0.2", "type": "library", "bom-ref": "pkg:npm/detect-package-manager@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-package-manager/package.json" }, { "name": "ImportedModules", "value": "detect-package-manager,detect,detect-package-manager/detect" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-package-manager/package.json" } ], "concludedValue": "node_modules/detect-package-manager/package.json" } ], "occurrences": [ { "location": "dist/commands/info.js", "line": 8 }, { "location": "dist/commands/info.js", "line": 126 }, { "location": "dist/lib/utils/package-manager.js", "line": 5 }, { "location": "dist/lib/utils/package-manager.js", "line": 45 }, { "location": "dist/lib/utils/package-manager.js", "line": 79 }, { "location": "src/commands/info.ts", "line": 7 }, { "location": "src/commands/info.ts", "line": 201 }, { "location": "src/lib/utils/package-manager.ts", "line": 3 }, { "location": "src/lib/utils/package-manager.ts", "line": 76 }, { "location": "src/lib/utils/package-manager.ts", "line": 108 } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "dist/commands/upgrade.js", "line": 5 }, { "location": "dist/commands/upgrade.js", "line": 7 }, { "location": "dist/commands/upgrade.js", "line": 8 }, { "location": "dist/lib/transform.js", "line": 6 }, { "location": "dist/lib/transform.js", "line": 8 }, { "location": "dist/lib/upgrade.js", "line": 5 }, { "location": "dist/lib/upgrade.js", "line": 16 }, { "location": "src/commands/upgrade.ts", "line": 5 }, { "location": "src/commands/upgrade.ts", "line": 14 }, { "location": "src/commands/upgrade.ts", "line": 15 }, { "location": "src/lib/transform.ts", "line": 1 }, { "location": "src/lib/transform.ts", "line": 9 }, { "location": "src/lib/upgrade.ts", "line": 1 }, { "location": "src/lib/upgrade.ts", "line": 18 } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "ImportedModules", "value": "cross-spawn,spawn,cross-spawn/spawn" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ], "occurrences": [ { "location": "dist/lib/run-spawn.js", "line": 1 }, { "location": "dist/lib/run-spawn.js", "line": 28 }, { "location": "src/lib/run-spawn.ts", "line": 1 }, { "location": "src/lib/run-spawn.ts", "line": 52 } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "15.0.0", "description": "the complete solution for node.js command-line programs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@15.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@15.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "ImportedModules", "value": "commander,Command,commander/Command,Option,commander/Option" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ], "occurrences": [ { "location": "dist/commands/add.js", "line": 7 }, { "location": "dist/commands/agent.js", "line": 3 }, { "location": "dist/commands/cloud.js", "line": 7 }, { "location": "dist/commands/create.js", "line": 6 }, { "location": "dist/commands/doctor.js", "line": 2 }, { "location": "dist/commands/info.js", "line": 3 }, { "location": "dist/commands/init.js", "line": 7 }, { "location": "dist/commands/mcp.js", "line": 3 }, { "location": "dist/commands/update.js", "line": 5 }, { "location": "dist/commands/upgrade.js", "line": 4 }, { "location": "dist/program.js", "line": 11 }, { "location": "src/commands/add.ts", "line": 1 }, { "location": "src/commands/agent.ts", "line": 1 }, { "location": "src/commands/cloud.ts", "line": 1 }, { "location": "src/commands/create.ts", "line": 1 }, { "location": "src/commands/doctor.ts", "line": 1 }, { "location": "src/commands/info.ts", "line": 1 }, { "location": "src/commands/init.ts", "line": 1 }, { "location": "src/commands/mcp.ts", "line": 1 }, { "location": "src/commands/update.ts", "line": 1 }, { "location": "src/commands/upgrade.ts", "line": 1 }, { "location": "src/program.ts", "line": 1 } ] } }, { "authors": [ { "name": "Andi Dittrich (https://andidittrich.com)" } ], "group": "", "name": "cli-progress", "version": "3.12.0", "description": "easy to use progress-bar for command-line/terminal applications", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-progress@3.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npkgz/cli-progress" } ], "type": "library", "bom-ref": "pkg:npm/cli-progress@3.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-progress/package.json" }, { "name": "ImportedModules", "value": "cli-progress,Presets,cli-progress/Presets,SingleBar,cli-progress/SingleBar" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-progress/package.json" } ], "concludedValue": "node_modules/cli-progress/package.json" } ], "occurrences": [ { "location": "dist/lib/upgrade.js", "line": 6 }, { "location": "src/lib/upgrade.ts", "line": 4 } ] } }, { "group": "", "name": "chalk", "version": "6.0.1", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@6.0.1", "type": "library", "bom-ref": "pkg:npm/chalk@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "dist/commands/create.js", "line": 7 }, { "location": "dist/commands/create.js", "line": 383 }, { "location": "dist/commands/doctor.js", "line": 3 }, { "location": "dist/commands/doctor.js", "line": 198 }, { "location": "dist/commands/doctor.js", "line": 204 }, { "location": "dist/commands/doctor.js", "line": 205 }, { "location": "dist/commands/doctor.js", "line": 208 }, { "location": "dist/commands/doctor.js", "line": 209 }, { "location": "dist/commands/doctor.js", "line": 210 }, { "location": "dist/commands/doctor.js", "line": 214 }, { "location": "dist/commands/doctor.js", "line": 219 }, { "location": "dist/commands/doctor.js", "line": 221 }, { "location": "dist/commands/doctor.js", "line": 222 }, { "location": "dist/commands/doctor.js", "line": 228 }, { "location": "dist/commands/doctor.js", "line": 232 }, { "location": "dist/commands/doctor.js", "line": 236 }, { "location": "dist/commands/doctor.js", "line": 248 }, { "location": "dist/commands/info.js", "line": 4 }, { "location": "dist/commands/info.js", "line": 221 }, { "location": "dist/commands/info.js", "line": 231 }, { "location": "dist/commands/info.js", "line": 235 }, { "location": "dist/commands/info.js", "line": 240 }, { "location": "dist/commands/info.js", "line": 246 }, { "location": "dist/commands/info.js", "line": 254 }, { "location": "dist/commands/info.js", "line": 274 }, { "location": "dist/lib/utils/logger.js", "line": 1 }, { "location": "dist/lib/utils/logger.js", "line": 5 }, { "location": "dist/lib/utils/logger.js", "line": 8 }, { "location": "dist/lib/utils/logger.js", "line": 11 }, { "location": "dist/lib/utils/logger.js", "line": 14 }, { "location": "dist/lib/utils/logger.js", "line": 17 }, { "location": "src/commands/create.ts", "line": 2 }, { "location": "src/commands/create.ts", "line": 530 }, { "location": "src/commands/doctor.ts", "line": 4 }, { "location": "src/commands/doctor.ts", "line": 310 }, { "location": "src/commands/doctor.ts", "line": 321 }, { "location": "src/commands/doctor.ts", "line": 324 }, { "location": "src/commands/doctor.ts", "line": 332 }, { "location": "src/commands/doctor.ts", "line": 337 }, { "location": "src/commands/doctor.ts", "line": 341 }, { "location": "src/commands/doctor.ts", "line": 346 }, { "location": "src/commands/doctor.ts", "line": 354 }, { "location": "src/commands/doctor.ts", "line": 360 }, { "location": "src/commands/doctor.ts", "line": 361 }, { "location": "src/commands/doctor.ts", "line": 381 }, { "location": "src/commands/doctor.ts", "line": 387 }, { "location": "src/commands/doctor.ts", "line": 394 }, { "location": "src/commands/doctor.ts", "line": 416 }, { "location": "src/commands/info.ts", "line": 6 }, { "location": "src/commands/info.ts", "line": 373 }, { "location": "src/commands/info.ts", "line": 386 }, { "location": "src/commands/info.ts", "line": 390 }, { "location": "src/commands/info.ts", "line": 396 }, { "location": "src/commands/info.ts", "line": 404 }, { "location": "src/commands/info.ts", "line": 425 }, { "location": "src/commands/info.ts", "line": 452 }, { "location": "src/lib/utils/logger.ts", "line": 1 }, { "location": "src/lib/utils/logger.ts", "line": 5 }, { "location": "src/lib/utils/logger.ts", "line": 8 }, { "location": "src/lib/utils/logger.ts", "line": 11 }, { "location": "src/lib/utils/logger.ts", "line": 14 }, { "location": "src/lib/utils/logger.ts", "line": 17 } ] } }, { "group": "", "name": "aui-auth", "version": "0.0.11", "description": "Sign in through assistant-ui accounts: server side sessions for web apps (OIDC code flow with PKCE, tokens kept in the app's store, single flight refresh), the device grant for CLIs, and token verification for resource servers", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aui-auth@0.0.11", "type": "library", "bom-ref": "pkg:npm/aui-auth@0.0.11", "properties": [ { "name": "SrcFile", "value": "node_modules/aui-auth/package.json" }, { "name": "ImportedModules", "value": "aui-auth/accounts,createProject,aui-auth/accounts/createProject,fetchOrganizations,aui-auth/accounts/fetchOrganizations,fetchProjects,aui-auth/accounts/fetchProjects,AccountsOrganization,aui-auth/accounts/AccountsOrganization,AccountsProject,aui-auth/accounts/AccountsProject,aui-auth/device,createDeviceLogin,aui-auth/device/createDeviceLogin,isAccessDenied,aui-auth/device/isAccessDenied,DeviceCredentials,aui-auth/device/DeviceCredentials,DeviceAuthorization,aui-auth/device/DeviceAuthorization" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aui-auth/package.json" } ], "concludedValue": "node_modules/aui-auth/package.json" } ], "occurrences": [ { "location": "dist/commands/cloud.js", "line": 10 }, { "location": "dist/commands/cloud.js", "line": 39 }, { "location": "dist/commands/cloud.js", "line": 68 }, { "location": "dist/commands/cloud.js", "line": 75 }, { "location": "src/commands/cloud.ts", "line": 9 }, { "location": "src/commands/cloud.ts", "line": 106 }, { "location": "src/commands/cloud.ts", "line": 159 }, { "location": "src/commands/cloud.ts", "line": 174 }, { "location": "dist/lib/cloud-auth.js", "line": 9 }, { "location": "src/lib/cloud-auth.ts", "line": 19 }, { "location": "src/lib/cloud-setup-login.ts", "line": 2 }, { "location": "dist/lib/cloud-auth.js", "line": 100 }, { "location": "dist/lib/cloud-auth.js", "line": 142 }, { "location": "dist/lib/cloud-auth.js", "line": 151 }, { "location": "dist/lib/cloud-auth.js", "line": 160 }, { "location": "src/lib/cloud-auth.ts", "line": 176 }, { "location": "src/lib/cloud-auth.ts", "line": 243 }, { "location": "src/lib/cloud-auth.ts", "line": 252 }, { "location": "src/lib/cloud-auth.ts", "line": 267 } ] }, "tags": [ "resource", "token", "web" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@vitest", "name": "coverage-v8", "version": "5.0.3", "description": "V8 coverage provider for Vitest", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/coverage-v8@5.0.3", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/guide/coverage" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/coverage-v8@5.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/coverage-v8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/coverage-v8/package.json" } ], "concludedValue": "node_modules/@vitest/coverage-v8/package.json" } ] } }, { "group": "@types", "name": "semver", "version": "7.8.0", "description": "TypeScript definitions for semver", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/semver@7.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/semver" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/semver@7.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/semver/package.json" } ], "concludedValue": "node_modules/@types/semver/package.json" } ] } }, { "group": "@types", "name": "node", "version": "26.6.3", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@26.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@26.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "jscodeshift", "version": "17.3.0", "description": "TypeScript definitions for jscodeshift", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/jscodeshift@17.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/jscodeshift" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/jscodeshift@17.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/jscodeshift/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/jscodeshift/package.json" } ], "concludedValue": "node_modules/@types/jscodeshift/package.json" } ] } }, { "group": "@types", "name": "debug", "version": "4.1.13", "description": "TypeScript definitions for debug", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/debug@4.1.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/debug@4.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/debug/package.json" } ], "concludedValue": "node_modules/@types/debug/package.json" } ] } }, { "group": "@types", "name": "cross-spawn", "version": "6.0.6", "description": "TypeScript definitions for cross-spawn", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/cross-spawn@6.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cross-spawn" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/cross-spawn@6.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/cross-spawn/package.json" } ], "concludedValue": "node_modules/@types/cross-spawn/package.json" } ] } }, { "group": "@types", "name": "cli-progress", "version": "3.11.6", "description": "TypeScript definitions for cli-progress", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/cli-progress@3.11.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cli-progress" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/cli-progress@3.11.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/cli-progress/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/cli-progress/package.json" } ], "concludedValue": "node_modules/@types/cli-progress/package.json" } ] } }, { "authors": [ { "name": "Nate Moore (https://twitter.com/n_moore)" } ], "group": "@clack", "name": "prompts", "version": "1.8.1", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40clack/prompts@1.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bombshell-dev/clack/tree/main/packages/prompts#readme" }, { "type": "vcs", "url": "git+https://github.com/bombshell-dev/clack.git" } ], "type": "library", "bom-ref": "pkg:npm/@clack/prompts@1.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@clack/prompts/package.json" }, { "name": "ImportedModules", "value": "@clack/prompts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@clack/prompts/package.json" } ], "concludedValue": "node_modules/@clack/prompts/package.json" } ], "occurrences": [ { "location": "dist/commands/cloud.js", "line": 9 }, { "location": "dist/commands/cloud.js", "line": 16 }, { "location": "dist/commands/cloud.js", "line": 28 }, { "location": "dist/commands/cloud.js", "line": 44 }, { "location": "dist/commands/cloud.js", "line": 149 }, { "location": "dist/commands/cloud.js", "line": 188 }, { "location": "dist/commands/create.js", "line": 10 }, { "location": "dist/commands/create.js", "line": 396 }, { "location": "dist/commands/create.js", "line": 397 }, { "location": "dist/commands/create.js", "line": 398 }, { "location": "dist/commands/create.js", "line": 425 }, { "location": "dist/commands/create.js", "line": 434 }, { "location": "dist/commands/create.js", "line": 438 }, { "location": "dist/commands/create.js", "line": 439 }, { "location": "dist/commands/mcp.js", "line": 7 }, { "location": "dist/commands/mcp.js", "line": 162 }, { "location": "dist/commands/mcp.js", "line": 163 }, { "location": "dist/commands/mcp.js", "line": 192 }, { "location": "dist/commands/mcp.js", "line": 193 }, { "location": "src/commands/cloud.ts", "line": 2 }, { "location": "src/commands/cloud.ts", "line": 36 }, { "location": "src/commands/cloud.ts", "line": 84 }, { "location": "src/commands/cloud.ts", "line": 121 }, { "location": "src/commands/cloud.ts", "line": 329 }, { "location": "src/commands/cloud.ts", "line": 452 }, { "location": "src/commands/create.ts", "line": 5 }, { "location": "src/commands/create.ts", "line": 589 }, { "location": "src/commands/create.ts", "line": 591 }, { "location": "src/commands/create.ts", "line": 592 }, { "location": "src/commands/create.ts", "line": 636 }, { "location": "src/commands/create.ts", "line": 646 }, { "location": "src/commands/create.ts", "line": 651 }, { "location": "src/commands/create.ts", "line": 652 }, { "location": "src/commands/mcp.ts", "line": 7 }, { "location": "src/commands/mcp.ts", "line": 278 }, { "location": "src/commands/mcp.ts", "line": 280 }, { "location": "src/commands/mcp.ts", "line": 292 }, { "location": "src/commands/mcp.ts", "line": 293 } ] } }, { "authors": [ { "name": "AgentbaseAI Inc." } ], "group": "@assistant-ui", "name": "x-buildutils", "version": "0.0.30", "description": "Internal build utilities for assistant-ui packages", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40assistant-ui/x-buildutils@0.0.30", "externalReferences": [ { "type": "website", "url": "https://www.assistant-ui.com/" }, { "type": "vcs", "url": "git+https://github.com/assistant-ui/assistant-ui.git" } ], "type": "library", "bom-ref": "pkg:npm/@assistant-ui/x-buildutils@0.0.30", "properties": [ { "name": "SrcFile", "value": "node_modules/@assistant-ui/x-buildutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@assistant-ui/x-buildutils/package.json" } ], "concludedValue": "node_modules/@assistant-ui/x-buildutils/package.json" } ] } }, { "authors": [ { "name": "AgentbaseAI Inc." } ], "group": "@assistant-ui", "name": "agent-launcher", "version": "0.1.17", "description": "Spawn the Claude Code CLI with a chosen plugin directory, skill, and prompt", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40assistant-ui/agent-launcher@0.1.17", "externalReferences": [ { "type": "website", "url": "https://www.assistant-ui.com/" }, { "type": "vcs", "url": "git+https://github.com/assistant-ui/assistant-ui.git" } ], "type": "library", "bom-ref": "pkg:npm/@assistant-ui/agent-launcher@0.1.17", "properties": [ { "name": "SrcFile", "value": "node_modules/@assistant-ui/agent-launcher/package.json" }, { "name": "ImportedModules", "value": "@assistant-ui/agent-launcher,launch,@assistant-ui/agent-launcher/launch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@assistant-ui/agent-launcher/package.json" } ], "concludedValue": "node_modules/@assistant-ui/agent-launcher/package.json" } ], "occurrences": [ { "location": "dist/commands/agent.js", "line": 4 }, { "location": "dist/commands/agent.js", "line": 18 }, { "location": "src/commands/agent.ts", "line": 2 }, { "location": "src/commands/agent.ts", "line": 25 } ] }, "tags": [ "cli" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/assistant-ui@0.0.121" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-10T23:00:19Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'assistant-ui' with version '0.0.121'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 25 source files." } ] }