{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d65e0aa0-602a-404b-95c6-25f14e93aa6a", "version": 1, "metadata": { "timestamp": "2026-10-10T08:03:00Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "better-sqlite3", "group": "", "version": "12.10.0", "description": "The fastest and simplest library for SQLite in Node.js.", "purl": "pkg:npm/better-sqlite3@12.10.0", "bom-ref": "pkg:npm/better-sqlite3@12.10.0", "author": "Joshua Wise ", "properties": [ { "name": "cdx:npm:scripts", "value": "install, build-release, build-debug, test, benchmark, download" }, { "name": "cdx:npm:buildScripts", "value": "build-release, build-debug" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "install" }, { "name": "cdx:npm:gypfile", "value": "true" }, { "name": "cdx:npm:native_addon", "value": "true" }, { "name": "cdx:npm:native_deps", "value": "bindings" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "http://github.com/WiseLibs/better-sqlite3" }, { "type": "vcs", "url": "git://github.com/WiseLibs/better-sqlite3.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@gar\\n@isaacs\\n@npmcli\\n@pkgjs\\n@tootallnate" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@gar/promisify/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@npmcli/agent/node_modules/agent-base/package.json\\nnode_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json\\nnode_modules/@npmcli/agent/package.json\\nnode_modules/@npmcli/fs/package.json\\nnode_modules/@npmcli/move-file/node_modules/brace-expansion/package.json\\nnode_modules/@npmcli/move-file/node_modules/glob/package.json\\nnode_modules/@npmcli/move-file/node_modules/minimatch/package.json\\nnode_modules/@npmcli/move-file/node_modules/mkdirp/package.json\\nnode_modules/@npmcli/move-file/node_modules/rimraf/package.json\\nnode_modules/@npmcli/move-file/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/@tootallnate/once/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/after/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/agentkeepalive/package.json\\nnode_modules/aggregate-error/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/ansi/package.json\\nnode_modules/aproba/package.json\\nnode_modules/are-we-there-yet/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-index/node_modules/debug/package.json\\nnode_modules/array-index/node_modules/ms/package.json\\nnode_modules/array-index/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/assertion-error/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/aws4/package.json\\nnode_modules/axios/package.json\\nnode_modules/b4a/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/bare-events/package.json\\nnode_modules/bare-fs/package.json\\nnode_modules/bare-path/package.json\\nnode_modules/bare-stream/package.json\\nnode_modules/bare-url/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/bindings/package.json\\nnode_modules/bl/package.json\\nnode_modules/block-stream/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/buffer/package.json\\nnode_modules/cacache/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/caseless/package.json\\nnode_modules/chai/package.json\\nnode_modules/chalk/node_modules/supports-color/package.json\\nnode_modules/chalk/package.json\\nnode_modules/check-error/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/chownr/package.json\\nnode_modules/clean-stack/package.json\\nnode_modules/cli-color/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/node_modules/wrap-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/cmake-js/node_modules/ansi-regex/package.json\\nnode_modules/cmake-js/node_modules/are-we-there-yet/package.json\\nnode_modules/cmake-js/node_modules/emoji-regex/package.json\\nnode_modules/cmake-js/node_modules/gauge/package.json\\nnode_modules/cmake-js/node_modules/npmlog/package.json\\nnode_modules/cmake-js/node_modules/signal-exit/package.json\\nnode_modules/cmake-js/node_modules/string-width/package.json\\nnode_modules/cmake-js/node_modules/strip-ansi/package.json\\nnode_modules/cmake-js/package.json\\nnode_modules/code-point-at/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/color-support/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/console-control-strings/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/d/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/decompress-response/package.json\\nnode_modules/deep-eql/package.json\\nnode_modules/deep-extend/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/delegates/package.json\\nnode_modules/detect-libc/package.json\\nnode_modules/diff/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/duplexer2/node_modules/readable-stream/package.json\\nnode_modules/duplexer2/node_modules/string_decoder/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/each-series-async/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/encoding/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/env-paths/package.json\\nnode_modules/err-code/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/es-set-tostringtag/package.json\\nnode_modules/es5-ext/package.json\\nnode_modules/es6-iterator/package.json\\nnode_modules/es6-symbol/package.json\\nnode_modules/es6-weak-map/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/esniff/package.json\\nnode_modules/event-emitter/package.json\\nnode_modules/events-universal/package.json\\nnode_modules/execspawn/package.json\\nnode_modules/expand-template/package.json\\nnode_modules/exponential-backoff/package.json\\nnode_modules/ext/package.json\\nnode_modules/extend/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-fifo/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/file-uri-to-path/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat/package.json\\nnode_modules/follow-redirects/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/fs-constants/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/fs-minipass/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/fstream/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/gauge/node_modules/ansi-regex/package.json\\nnode_modules/gauge/node_modules/emoji-regex/package.json\\nnode_modules/gauge/node_modules/string-width/package.json\\nnode_modules/gauge/node_modules/strip-ansi/package.json\\nnode_modules/gauge/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-func-name/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/getpass/package.json\\nnode_modules/ghreleases/package.json\\nnode_modules/ghrepos/package.json\\nnode_modules/ghutils/package.json\\nnode_modules/github-from-package/example/package.json\\nnode_modules/github-from-package/package.json\\nnode_modules/glob/package.json\\nnode_modules/gopd/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/har-schema/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/has-unicode/package.json\\nnode_modules/hasown/package.json\\nnode_modules/he/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http-proxy-agent/node_modules/agent-base/package.json\\nnode_modules/http-proxy-agent/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/humanize-ms/package.json\\nnode_modules/hyperquest/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/infer-owner/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ini/package.json\\nnode_modules/ip-address/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-lambda/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-promise/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/isstream/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/jsonist/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.pad/package.json\\nnode_modules/lodash.padend/package.json\\nnode_modules/lodash.padstart/package.json\\nnode_modules/lodash.uniq/package.json\\nnode_modules/log-symbols/package.json\\nnode_modules/loupe/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/lru-queue/package.json\\nnode_modules/make-fetch-happen/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/memoizee/package.json\\nnode_modules/memory-stream/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mimic-response/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/minipass-collect/package.json\\nnode_modules/minipass-fetch/package.json\\nnode_modules/minipass-flush/node_modules/minipass/package.json\\nnode_modules/minipass-flush/package.json\\nnode_modules/minipass-pipeline/node_modules/minipass/package.json\\nnode_modules/minipass-pipeline/package.json\\nnode_modules/minipass-sized/node_modules/minipass/package.json\\nnode_modules/minipass-sized/package.json\\nnode_modules/minipass/package.json\\nnode_modules/minizlib/node_modules/minipass/package.json\\nnode_modules/minizlib/package.json\\nnode_modules/mkdirp-classic/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/napi-build-utils/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/next-tick/package.json\\nnode_modules/node-abi/package.json\\nnode_modules/node-addon-api/package.json\\nnode_modules/node-api-headers/package.json\\nnode_modules/node-gyp/node_modules/isexe/package.json\\nnode_modules/node-gyp/node_modules/which/package.json\\nnode_modules/node-gyp/package.json\\nnode_modules/node-ninja/node_modules/abbrev/package.json\\nnode_modules/node-ninja/node_modules/are-we-there-yet/package.json\\nnode_modules/node-ninja/node_modules/brace-expansion/package.json\\nnode_modules/node-ninja/node_modules/gauge/package.json\\nnode_modules/node-ninja/node_modules/glob/package.json\\nnode_modules/node-ninja/node_modules/isarray/package.json\\nnode_modules/node-ninja/node_modules/minimatch/package.json\\nnode_modules/node-ninja/node_modules/nopt/package.json\\nnode_modules/node-ninja/node_modules/npmlog/package.json\\nnode_modules/node-ninja/node_modules/readable-stream/package.json\\nnode_modules/node-ninja/node_modules/safe-buffer/package.json\\nnode_modules/node-ninja/node_modules/semver/package.json\\nnode_modules/node-ninja/node_modules/string_decoder/package.json\\nnode_modules/node-ninja/node_modules/tar/package.json\\nnode_modules/node-ninja/node_modules/which/package.json\\nnode_modules/node-ninja/package.json\\nnode_modules/nodemark/package.json\\nnode_modules/noop-logger/package.json\\nnode_modules/nopt/package.json\\nnode_modules/npm-path/node_modules/which/package.json\\nnode_modules/npm-path/package.json\\nnode_modules/npm-which/node_modules/which/package.json\\nnode_modules/npm-which/package.json\\nnode_modules/npmlog/package.json\\nnode_modules/number-is-nan/package.json\\nnode_modules/nw-gyp/node_modules/abbrev/package.json\\nnode_modules/nw-gyp/node_modules/ansi-regex/package.json\\nnode_modules/nw-gyp/node_modules/aproba/package.json\\nnode_modules/nw-gyp/node_modules/are-we-there-yet/package.json\\nnode_modules/nw-gyp/node_modules/brace-expansion/package.json\\nnode_modules/nw-gyp/node_modules/gauge/package.json\\nnode_modules/nw-gyp/node_modules/glob/package.json\\nnode_modules/nw-gyp/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/nw-gyp/node_modules/isarray/package.json\\nnode_modules/nw-gyp/node_modules/minimatch/package.json\\nnode_modules/nw-gyp/node_modules/nopt/package.json\\nnode_modules/nw-gyp/node_modules/npmlog/package.json\\nnode_modules/nw-gyp/node_modules/readable-stream/package.json\\nnode_modules/nw-gyp/node_modules/safe-buffer/package.json\\nnode_modules/nw-gyp/node_modules/semver/package.json\\nnode_modules/nw-gyp/node_modules/signal-exit/package.json\\nnode_modules/nw-gyp/node_modules/string-width/package.json\\nnode_modules/nw-gyp/node_modules/string_decoder/package.json\\nnode_modules/nw-gyp/node_modules/strip-ansi/package.json\\nnode_modules/nw-gyp/node_modules/tar/package.json\\nnode_modules/nw-gyp/node_modules/which/package.json\\nnode_modules/nw-gyp/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/once/package.json\\nnode_modules/os-homedir/package.json\\nnode_modules/os-tmpdir/package.json\\nnode_modules/osenv/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-map/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/path-array/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/pathval/package.json\\nnode_modules/performance-now/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/prebuild-install/node_modules/napi-build-utils/package.json\\nnode_modules/prebuild-install/node_modules/node-abi/package.json\\nnode_modules/prebuild-install/package.json\\nnode_modules/prebuild/package.json\\nnode_modules/proc-log/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/promise-inflight/package.json\\nnode_modules/promise-retry/package.json\\nnode_modules/proxy-from-env/package.json\\nnode_modules/psl/package.json\\nnode_modules/pump/package.json\\nnode_modules/punycode/package.json\\nnode_modules/qs/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/rc/node_modules/strip-json-comments/package.json\\nnode_modules/rc/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/request/node_modules/form-data/package.json\\nnode_modules/request/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/retry/package.json\\nnode_modules/rimraf/node_modules/brace-expansion/package.json\\nnode_modules/rimraf/node_modules/glob/package.json\\nnode_modules/rimraf/node_modules/minimatch/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/run-waterfall/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/set-blocking/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/simple-concat/package.json\\nnode_modules/simple-get/package.json\\nnode_modules/simple-mime/package.json\\nnode_modules/smart-buffer/package.json\\nnode_modules/socks-proxy-agent/node_modules/agent-base/package.json\\nnode_modules/socks-proxy-agent/package.json\\nnode_modules/socks/package.json\\nnode_modules/sqlite/package.json\\nnode_modules/sqlite3/node_modules/@npmcli/fs/package.json\\nnode_modules/sqlite3/node_modules/abbrev/package.json\\nnode_modules/sqlite3/node_modules/ansi-regex/package.json\\nnode_modules/sqlite3/node_modules/are-we-there-yet/package.json\\nnode_modules/sqlite3/node_modules/brace-expansion/package.json\\nnode_modules/sqlite3/node_modules/cacache/package.json\\nnode_modules/sqlite3/node_modules/emoji-regex/package.json\\nnode_modules/sqlite3/node_modules/fs-minipass/package.json\\nnode_modules/sqlite3/node_modules/gauge/package.json\\nnode_modules/sqlite3/node_modules/glob/package.json\\nnode_modules/sqlite3/node_modules/http-proxy-agent/package.json\\nnode_modules/sqlite3/node_modules/lru-cache/package.json\\nnode_modules/sqlite3/node_modules/make-fetch-happen/package.json\\nnode_modules/sqlite3/node_modules/minimatch/package.json\\nnode_modules/sqlite3/node_modules/minipass-collect/package.json\\nnode_modules/sqlite3/node_modules/minipass-fetch/package.json\\nnode_modules/sqlite3/node_modules/minipass/package.json\\nnode_modules/sqlite3/node_modules/mkdirp/package.json\\nnode_modules/sqlite3/node_modules/node-gyp/package.json\\nnode_modules/sqlite3/node_modules/nopt/package.json\\nnode_modules/sqlite3/node_modules/npmlog/package.json\\nnode_modules/sqlite3/node_modules/rimraf/package.json\\nnode_modules/sqlite3/node_modules/signal-exit/package.json\\nnode_modules/sqlite3/node_modules/socks-proxy-agent/package.json\\nnode_modules/sqlite3/node_modules/ssri/package.json\\nnode_modules/sqlite3/node_modules/string-width/package.json\\nnode_modules/sqlite3/node_modules/strip-ansi/package.json\\nnode_modules/sqlite3/node_modules/unique-filename/package.json\\nnode_modules/sqlite3/node_modules/unique-slug/package.json\\nnode_modules/sqlite3/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/ssri/package.json\\nnode_modules/streamx/package.json\\nnode_modules/string-width-cjs/node_modules/ansi-regex/package.json\\nnode_modules/string-width-cjs/node_modules/emoji-regex/package.json\\nnode_modules/string-width-cjs/node_modules/strip-ansi/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/tar-fs/node_modules/bl/package.json\\nnode_modules/tar-fs/node_modules/chownr/package.json\\nnode_modules/tar-fs/node_modules/tar-stream/package.json\\nnode_modules/tar-fs/package.json\\nnode_modules/tar-stream/package.json\\nnode_modules/tar/node_modules/fs-minipass/node_modules/minipass/package.json\\nnode_modules/tar/node_modules/fs-minipass/package.json\\nnode_modules/tar/node_modules/minipass/package.json\\nnode_modules/tar/node_modules/mkdirp/package.json\\nnode_modules/tar/package.json\\nnode_modules/teex/package.json\\nnode_modules/text-decoder/package.json\\nnode_modules/through2/node_modules/readable-stream/package.json\\nnode_modules/through2/node_modules/string_decoder/package.json\\nnode_modules/through2/package.json\\nnode_modules/timers-ext/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/type-detect/package.json\\nnode_modules/type/package.json\\nnode_modules/unique-filename/package.json\\nnode_modules/unique-slug/package.json\\nnode_modules/universalify/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/url-join/package.json\\nnode_modules/url-template/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/util-extend/package.json\\nnode_modules/uuid/package.json\\nnode_modules/verror/package.json\\nnode_modules/which/package.json\\nnode_modules/wide-align/node_modules/ansi-regex/package.json\\nnode_modules/wide-align/node_modules/emoji-regex/package.json\\nnode_modules/wide-align/node_modules/string-width/package.json\\nnode_modules/wide-align/node_modules/strip-ansi/package.json\\nnode_modules/wide-align/package.json\\nnode_modules/workerpool/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/string-width/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/xtend/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs-unparser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/emoji-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "yargs-unparser", "version": "2.0.0", "description": "Converts back a yargs argv object to its original array form", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-unparser@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-unparser" } ], "type": "library", "bom-ref": "pkg:npm/yargs-unparser@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-unparser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-unparser/package.json" } ], "concludedValue": "node_modules/yargs-unparser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "21.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@21.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@21.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "17.7.3", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@17.7.3", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@17.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wide-align/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/gauge/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/wide-align/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/gauge/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wide-align/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/gauge/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wide-align/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/gauge/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "4.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "7.0.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "8.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@8.1.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@8.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jos de Jong (https://github.com/josdejong)" } ], "group": "", "name": "workerpool", "version": "9.3.4", "description": "Offload tasks to a pool of workers on node.js and in the browser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/workerpool@9.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/josdejong/workerpool" }, { "type": "vcs", "url": "git://github.com/josdejong/workerpool.git" } ], "type": "library", "bom-ref": "pkg:npm/workerpool@9.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/workerpool/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/workerpool/package.json" } ], "concludedValue": "node_modules/workerpool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org/)" } ], "group": "", "name": "wide-align", "version": "1.1.5", "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wide-align@1.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/wide-align" } ], "type": "library", "bom-ref": "pkg:npm/wide-align@1.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/wide-align/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wide-align/package.json" } ], "concludedValue": "node_modules/wide-align/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "description": "richer JavaScript errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davepacheco/node-verror.git" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/package.json" } ], "concludedValue": "node_modules/verror/package.json" } ] } }, { "group": "", "name": "uuid", "version": "3.4.0", "description": "RFC4122 (v1, v4, and v5) UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "group": "", "name": "util-extend", "version": "1.0.3", "description": "Node's internal object extension function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-extend@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/util-extend" } ], "type": "library", "bom-ref": "pkg:npm/util-extend@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/util-extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-extend/package.json" } ], "concludedValue": "node_modules/util-extend/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Bram Stein (http://www.bramstein.com)" } ], "group": "", "name": "url-template", "version": "2.0.8", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url-template@2.0.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bramstein/url-template.git" } ], "type": "library", "bom-ref": "pkg:npm/url-template@2.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/url-template/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url-template/package.json" } ], "concludedValue": "node_modules/url-template/package.json" } ] } }, { "authors": [ { "name": "José F. Romaniello (http://joseoncode.com)" } ], "group": "", "name": "url-join", "version": "4.0.1", "description": "Join urls and normalize as in path.join.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url-join@4.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/jfromaniello/url-join.git" } ], "type": "library", "bom-ref": "pkg:npm/url-join@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/url-join/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url-join/package.json" } ], "concludedValue": "node_modules/url-join/package.json" } ] } }, { "authors": [ { "name": "Gary Court " } ], "group": "", "name": "uri-js", "version": "4.4.1", "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-js@4.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/garycourt/uri-js" }, { "type": "vcs", "url": "http://github.com/garycourt/uri-js" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-js/package.json" } ], "concludedValue": "node_modules/uri-js/package.json" } ] } }, { "authors": [ { "name": "Ryan Zimmerman " } ], "group": "", "name": "universalify", "version": "2.0.1", "description": "Make a callback- or promise-based function support both promises and callbacks.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/universalify@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/RyanZim/universalify#readme" }, { "type": "vcs", "url": "git+https://github.com/RyanZim/universalify.git" } ], "type": "library", "bom-ref": "pkg:npm/universalify@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/universalify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/universalify/package.json" } ], "concludedValue": "node_modules/universalify/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "unique-slug", "version": "4.0.0", "description": "Generate a unique character string suitible for use in files and URLs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unique-slug@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/unique-slug.git" } ], "type": "library", "bom-ref": "pkg:npm/unique-slug@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unique-slug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unique-slug/package.json" } ], "concludedValue": "node_modules/unique-slug/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "unique-filename", "version": "3.0.0", "description": "Generate a unique filename for use in temporary directories or caches.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unique-filename@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/unique-filename" }, { "type": "vcs", "url": "https://github.com/npm/unique-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/unique-filename@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unique-filename/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unique-filename/package.json" } ], "concludedValue": "node_modules/unique-filename/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://alogicalparadox.com)" } ], "group": "", "name": "type-detect", "version": "4.1.0", "description": "Improved typeof detection for node.js and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-detect@4.1.0", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/type-detect.git" } ], "type": "library", "bom-ref": "pkg:npm/type-detect@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-detect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-detect/package.json" } ], "concludedValue": "node_modules/type-detect/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (https://www.medikoo.com/)" } ], "group": "", "name": "type", "version": "2.7.3", "description": "Runtime validation and processing of JavaScript types", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type@2.7.3", "type": "library", "bom-ref": "pkg:npm/type@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type/package.json" } ], "concludedValue": "node_modules/type/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "TweetNaCl-js contributors" } ], "group": "", "name": "tweetnacl", "version": "0.14.5", "description": "Port of TweetNaCl cryptographic library to JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Unlicense", "url": "https://opensource.org/licenses/Unlicense", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "website", "url": "https://tweetnacl.js.org" }, { "type": "vcs", "url": "https://github.com/dchest/tweetnacl-js.git" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tweetnacl/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tweetnacl/package.json" } ], "concludedValue": "node_modules/tweetnacl/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.6.0", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel-agent@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "authors": [ { "name": "Jeremy Stashewsky " } ], "group": "", "name": "tough-cookie", "version": "2.5.0", "description": "RFC6265 Cookies and Cookie Jar for node.js", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tough-cookie@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/salesforce/tough-cookie" }, { "type": "vcs", "url": "git://github.com/salesforce/tough-cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/package.json" } ], "concludedValue": "node_modules/tough-cookie/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "timers-ext", "version": "0.1.8", "description": "Timers extensions", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/timers-ext@0.1.8", "type": "library", "bom-ref": "pkg:npm/timers-ext@0.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-ext/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/timers-ext/package.json" } ], "concludedValue": "node_modules/timers-ext/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "0.6.5", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@0.6.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@0.6.5", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "group": "", "name": "string_decoder", "version": "0.10.31", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/node_modules/string_decoder/package.json" }, { "name": "SrcFile", "value": "node_modules/duplexer2/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer2/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/duplexer2/node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.0.34", "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.0.34", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.0.34", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/through2/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "text-decoder", "version": "1.2.7", "description": "Streaming text decoder that preserves multibyte Unicode characters", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-decoder@1.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/text-decoder#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/text-decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/text-decoder@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/text-decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/text-decoder/package.json" } ], "concludedValue": "node_modules/text-decoder/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "teex", "version": "1.0.1", "description": "Turn a readable stream into multiple readable streamx streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/teex@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/teex" }, { "type": "vcs", "url": "https://github.com/mafintosh/teex.git" } ], "type": "library", "bom-ref": "pkg:npm/teex@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/teex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/teex/package.json" } ], "concludedValue": "node_modules/teex/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "tar-stream", "version": "3.2.2", "description": "tar-stream is a streaming tar parser and generator and nothing else. It operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar-stream@3.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/tar-stream" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/tar-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/tar-stream@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-stream/package.json" } ], "concludedValue": "node_modules/tar-stream/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus" } ], "group": "", "name": "tar-fs", "version": "2.1.5", "description": "filesystem bindings for tar-stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar-fs@2.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/tar-fs" }, { "type": "vcs", "url": "https://github.com/mafintosh/tar-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/tar-fs@2.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-fs/package.json" } ], "concludedValue": "node_modules/tar-fs/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "tar-stream", "version": "2.2.0", "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar-stream@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/tar-stream" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/tar-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/tar-stream@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-fs/node_modules/tar-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-fs/node_modules/tar-stream/package.json" } ], "concludedValue": "node_modules/tar-fs/node_modules/tar-stream/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "1.1.4", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@1.1.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-fs/node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-fs/node_modules/chownr/package.json" } ], "concludedValue": "node_modules/tar-fs/node_modules/chownr/package.json" } ] } }, { "group": "", "name": "bl", "version": "4.1.0", "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bl@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/bl" }, { "type": "vcs", "url": "https://github.com/rvagg/bl.git" } ], "type": "library", "bom-ref": "pkg:npm/bl@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-fs/node_modules/bl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-fs/node_modules/bl/package.json" } ], "concludedValue": "node_modules/tar-fs/node_modules/bl/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "tar", "version": "6.2.1", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@6.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@6.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ] } }, { "group": "", "name": "mkdirp", "version": "1.0.4", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/node_modules/mkdirp/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/mkdirp/package.json" }, { "name": "SrcFile", "value": "node_modules/@npmcli/move-file/node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/move-file/node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/@npmcli/move-file/node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "5.0.0", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/tar/node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs-minipass", "version": "2.1.0", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-minipass@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-minipass@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/node_modules/fs-minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/fs-minipass/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "3.3.6", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@3.3.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@3.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/node_modules/fs-minipass/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minizlib/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-sized/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-pipeline/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-flush/node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass-flush/node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "8.1.1", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@8.1.1", "type": "library", "bom-ref": "pkg:npm/supports-color@8.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "3.1.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@3.1.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.3.0", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "5.1.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@5.1.2", "type": "library", "bom-ref": "pkg:npm/string-width@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "streamx", "version": "2.28.1", "description": "An iteration of the Node.js core streams with a series of improvements", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/streamx@2.28.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/streamx" }, { "type": "vcs", "url": "https://github.com/mafintosh/streamx.git" } ], "type": "library", "bom-ref": "pkg:npm/streamx@2.28.1", "properties": [ { "name": "SrcFile", "value": "node_modules/streamx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/streamx/package.json" } ], "concludedValue": "node_modules/streamx/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ssri", "version": "10.0.6", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ssri@10.0.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ssri.git" } ], "type": "library", "bom-ref": "pkg:npm/ssri@10.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/ssri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ssri/package.json" } ], "concludedValue": "node_modules/ssri/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "sshpk", "version": "1.18.0", "description": "A library for finding and using SSH public keys", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sshpk@1.18.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-sshpk#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-sshpk.git" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sshpk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sshpk/package.json" } ], "concludedValue": "node_modules/sshpk/package.json" } ] } }, { "authors": [ { "name": "Mapbox (https://mapbox.com/)" } ], "group": "", "name": "sqlite3", "version": "5.1.7", "description": "Asynchronous, non-blocking SQLite3 bindings", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sqlite3@5.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TryGhost/node-sqlite3" }, { "type": "vcs", "url": "https://github.com/TryGhost/node-sqlite3.git" } ], "type": "library", "bom-ref": "pkg:npm/sqlite3@5.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/package.json" }, { "name": "ImportedModules", "value": "sqlite3" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/package.json" } ], "concludedValue": "node_modules/sqlite3/package.json" } ], "occurrences": [ { "location": "benchmark/drivers.js", "line": 16 } ] }, "tags": [ "sql" ] }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "unique-slug", "version": "2.0.2", "description": "Generate a unique character string suitible for use in files and URLs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unique-slug@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/iarna/unique-slug.git" } ], "type": "library", "bom-ref": "pkg:npm/unique-slug@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/unique-slug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/unique-slug/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/unique-slug/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org/)" } ], "group": "", "name": "unique-filename", "version": "1.1.1", "description": "Generate a unique filename for use in temporary directories or caches.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unique-filename@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/unique-filename" }, { "type": "vcs", "url": "https://github.com/iarna/unique-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/unique-filename@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/unique-filename/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/unique-filename/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/unique-filename/package.json" } ] } }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "ssri", "version": "8.0.1", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ssri@8.0.1", "type": "library", "bom-ref": "pkg:npm/ssri@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/ssri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/ssri/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/ssri/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "socks-proxy-agent", "version": "6.2.1", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks-proxy-agent@6.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme" }, { "type": "vcs", "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/socks-proxy-agent@6.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/socks-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/socks-proxy-agent/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/socks-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "3.0.7", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@3.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit" }, { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/signal-exit/package.json" }, { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/signal-exit/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cmake-js/node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/cmake-js/node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "3.0.2", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@3.0.2", "type": "library", "bom-ref": "pkg:npm/rimraf@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/rimraf/package.json" }, { "name": "SrcFile", "value": "node_modules/@npmcli/move-file/node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/move-file/node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/@npmcli/move-file/node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npmlog", "version": "6.0.2", "description": "logger for npm", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npmlog@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npmlog.git" } ], "type": "library", "bom-ref": "pkg:npm/npmlog@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/npmlog/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/npmlog/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cmake-js/node_modules/npmlog/package.json" } ], "concludedValue": "node_modules/cmake-js/node_modules/npmlog/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "5.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/nopt/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "node-gyp", "version": "8.4.1", "description": "Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-gyp@8.4.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp@8.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/node-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/node-gyp/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/node-gyp/package.json" } ] } }, { "group": "", "name": "minipass-fetch", "version": "1.4.1", "description": "An implementation of window.fetch in Node.js using Minipass streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-fetch@1.4.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/minipass-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-fetch@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/minipass-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/minipass-fetch/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/minipass-fetch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-collect", "version": "1.0.2", "description": "A Minipass stream that collects all the data into a single chunk", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-collect@1.0.2", "type": "library", "bom-ref": "pkg:npm/minipass-collect@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/minipass-collect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/minipass-collect/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/minipass-collect/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/minimatch/package.json" }, { "name": "SrcFile", "value": "node_modules/rimraf/node_modules/minimatch/package.json" }, { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/minimatch/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/minimatch/package.json" }, { "name": "SrcFile", "value": "node_modules/@npmcli/move-file/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/move-file/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/@npmcli/move-file/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "make-fetch-happen", "version": "9.1.0", "description": "Opinionated, caching, retrying fetch client", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-fetch-happen@9.1.0", "type": "library", "bom-ref": "pkg:npm/make-fetch-happen@9.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/make-fetch-happen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/make-fetch-happen/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/make-fetch-happen/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "6.0.0", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@6.0.0", "type": "library", "bom-ref": "pkg:npm/lru-cache@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "4.0.1", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-proxy-agent@4.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/node-http-proxy-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/http-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.2.3", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.2.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/glob/package.json" }, { "name": "SrcFile", "value": "node_modules/rimraf/node_modules/glob/package.json" }, { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/glob/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/glob/package.json" }, { "name": "SrcFile", "value": "node_modules/@npmcli/move-file/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/move-file/node_modules/glob/package.json" } ], "concludedValue": "node_modules/@npmcli/move-file/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "gauge", "version": "4.0.4", "description": "A terminal based horizontal gauge", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gauge@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/gauge" }, { "type": "vcs", "url": "https://github.com/npm/gauge.git" } ], "type": "library", "bom-ref": "pkg:npm/gauge@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/gauge/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/gauge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cmake-js/node_modules/gauge/package.json" } ], "concludedValue": "node_modules/cmake-js/node_modules/gauge/package.json" } ] } }, { "group": "", "name": "cacache", "version": "15.3.0", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacache@15.3.0", "type": "library", "bom-ref": "pkg:npm/cacache@15.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/cacache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/cacache/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/cacache/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.21", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.21", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/brace-expansion/package.json" }, { "name": "SrcFile", "value": "node_modules/rimraf/node_modules/brace-expansion/package.json" }, { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/brace-expansion/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/brace-expansion/package.json" }, { "name": "SrcFile", "value": "node_modules/@npmcli/move-file/node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/move-file/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/@npmcli/move-file/node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "are-we-there-yet", "version": "3.0.1", "description": "Keep track of the overall completion of many disparate processes", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/are-we-there-yet@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/are-we-there-yet" }, { "type": "vcs", "url": "https://github.com/npm/are-we-there-yet.git" } ], "type": "library", "bom-ref": "pkg:npm/are-we-there-yet@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/are-we-there-yet/package.json" }, { "name": "SrcFile", "value": "node_modules/cmake-js/node_modules/are-we-there-yet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cmake-js/node_modules/are-we-there-yet/package.json" } ], "concludedValue": "node_modules/cmake-js/node_modules/are-we-there-yet/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "abbrev", "version": "1.1.1", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.1.1", "type": "library", "bom-ref": "pkg:npm/abbrev@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/abbrev/package.json" }, { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/abbrev/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/abbrev/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "fs", "version": "1.1.1", "description": "filesystem utilities for the npm cli", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/fs@1.1.1", "type": "library", "bom-ref": "pkg:npm/@npmcli/fs@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite3/node_modules/@npmcli/fs/package.json" }, { "name": "ImportedModules", "value": "fs" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite3/node_modules/@npmcli/fs/package.json" } ], "concludedValue": "node_modules/sqlite3/node_modules/@npmcli/fs/package.json" } ], "occurrences": [ { "location": "deps/copy.js", "line": 3 }, { "location": "lib/database.js", "line": 2 }, { "location": "lib/methods/backup.js", "line": 2 } ] } }, { "authors": [ { "name": "Kriasoft (https://www.kriasoft.com)" } ], "group": "", "name": "sqlite", "version": "5.1.1", "description": "SQLite client for Node.js applications with SQL-based migrations API written in Typescript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sqlite@5.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriasoft/node-sqlite#readme" }, { "type": "vcs", "url": "git+https://github.com/kriasoft/node-sqlite.git" } ], "type": "library", "bom-ref": "pkg:npm/sqlite@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sqlite/package.json" }, { "name": "ImportedModules", "value": "sqlite" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sqlite/package.json" } ], "concludedValue": "node_modules/sqlite/package.json" } ], "occurrences": [ { "location": "benchmark/drivers.js", "line": 17 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "socks-proxy-agent", "version": "8.0.5", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks-proxy-agent@8.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/socks-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/socks-proxy-agent/package.json" } ], "concludedValue": "node_modules/socks-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "7.1.4", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agent-base@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/socks-proxy-agent/node_modules/agent-base/package.json" }, { "name": "SrcFile", "value": "node_modules/http-proxy-agent/node_modules/agent-base/package.json" }, { "name": "SrcFile", "value": "node_modules/@npmcli/agent/node_modules/agent-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/agent/node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/@npmcli/agent/node_modules/agent-base/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "socks", "version": "2.8.10", "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks@2.8.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks/" }, { "type": "vcs", "url": "git+https://github.com/JoshGlazebrook/socks.git" } ], "type": "library", "bom-ref": "pkg:npm/socks@2.8.10", "properties": [ { "name": "SrcFile", "value": "node_modules/socks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/socks/package.json" } ], "concludedValue": "node_modules/socks/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "smart-buffer", "version": "4.2.0", "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/smart-buffer@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/smart-buffer@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/smart-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/smart-buffer/package.json" } ], "concludedValue": "node_modules/smart-buffer/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "simple-mime", "version": "0.1.0", "description": "A simple mime database.", "scope": "optional", "purl": "pkg:npm/simple-mime@0.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/simple-mime.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-mime@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-mime/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-mime/package.json" } ], "concludedValue": "node_modules/simple-mime/package.json" } ] }, "tags": [ "database" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "simple-get", "version": "4.0.1", "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-get@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/simple-get" }, { "type": "vcs", "url": "git://github.com/feross/simple-get.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-get@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-get/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-get/package.json" } ], "concludedValue": "node_modules/simple-get/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "simple-concat", "version": "1.0.1", "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-concat@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/simple-concat" }, { "type": "vcs", "url": "git://github.com/feross/simple-concat.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-concat@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-concat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-concat/package.json" } ], "concludedValue": "node_modules/simple-concat/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "4.1.0", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "3.0.0", "description": "Regular expression for matching a shebang line", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "2.0.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "set-blocking", "version": "2.0.0", "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-blocking@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/set-blocking#readme" }, { "type": "vcs", "url": "git+https://github.com/yargs/set-blocking.git" } ], "type": "library", "bom-ref": "pkg:npm/set-blocking@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-blocking/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-blocking/package.json" } ], "concludedValue": "node_modules/set-blocking/package.json" } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "6.0.2", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serialize-javascript@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "run-waterfall", "version": "1.1.7", "description": "Run an array of functions in series, each passing its results to the next function (waterfall)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-waterfall@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/run-waterfall" }, { "type": "vcs", "url": "git://github.com/feross/run-waterfall.git" } ], "type": "library", "bom-ref": "pkg:npm/run-waterfall@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/run-waterfall/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/run-waterfall/package.json" } ], "concludedValue": "node_modules/run-waterfall/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.7.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.7.1", "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Tim Koschützki (http://debuggable.com/)" } ], "group": "", "name": "retry", "version": "0.12.0", "description": "Abstraction for exponential and custom retry strategies for failed operations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/retry@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tim-kos/node-retry" }, { "type": "vcs", "url": "git://github.com/tim-kos/node-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/retry@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/retry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/retry/package.json" } ], "concludedValue": "node_modules/retry/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.88.2", "description": "Simplified HTTP request client.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request@2.88.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.88.2", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "2.3.3", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/form-data@2.3.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/request/node_modules/form-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/node_modules/form-data/package.json" } ], "concludedValue": "node_modules/request/node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "4.1.2", "description": "Recursive version of fs.readdir with small RAM & CPU footprint.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readdirp@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "3.6.2", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@3.6.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@3.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "rc", "version": "1.2.8", "description": "hardwired configuration loader", "scope": "optional", "licenses": [ { "expression": "BSD-2-Clause OR MIT OR Apache-2.0" } ], "purl": "pkg:npm/rc@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/rc.git" } ], "type": "library", "bom-ref": "pkg:npm/rc@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/rc/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rc/package.json" } ], "concludedValue": "node_modules/rc/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "2.0.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@2.0.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rc/node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rc/node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/rc/node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "group": "", "name": "qs", "version": "6.5.5", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "2.3.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.3.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus Madsen " } ], "group": "", "name": "pump", "version": "3.0.4", "description": "pipe streams together and close all of them if one of them closes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pump@3.0.4", "type": "library", "bom-ref": "pkg:npm/pump@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/pump/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pump/package.json" } ], "concludedValue": "node_modules/pump/package.json" } ] } }, { "authors": [ { "name": "Lupo Montero (https://lupomontero.com/)" } ], "group": "", "name": "psl", "version": "1.15.0", "description": "Domain name parser based on the Public Suffix List", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/psl@1.15.0", "type": "library", "bom-ref": "pkg:npm/psl@1.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/psl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/psl/package.json" } ], "concludedValue": "node_modules/psl/package.json" } ] } }, { "authors": [ { "name": "Rob Wu (https://robwu.nl/)" } ], "group": "", "name": "proxy-from-env", "version": "2.1.0", "description": "Offers getProxyForUrl to get the proxy URL for a URL, respecting the *_PROXY (e.g. HTTP_PROXY) and NO_PROXY environment variables.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-from-env@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rob--W/proxy-from-env#readme" }, { "type": "vcs", "url": "git+https://github.com/Rob--W/proxy-from-env.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-from-env@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-from-env/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-from-env/package.json" } ], "concludedValue": "node_modules/proxy-from-env/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "promise-retry", "version": "2.0.1", "description": "Retries a function that returns a promise, leveraging the power of the retry module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promise-retry@2.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-promise-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/promise-retry@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/promise-retry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promise-retry/package.json" } ], "concludedValue": "node_modules/promise-retry/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org/)" } ], "group": "", "name": "promise-inflight", "version": "1.0.1", "description": "One promise for multiple requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promise-inflight@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/promise-inflight#readme" }, { "type": "vcs", "url": "git+https://github.com/iarna/promise-inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/promise-inflight@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/promise-inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promise-inflight/package.json" } ], "concludedValue": "node_modules/promise-inflight/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "proc-log", "version": "4.2.0", "description": "just emit 'log' events on the process object", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proc-log@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/proc-log.git" } ], "type": "library", "bom-ref": "pkg:npm/proc-log@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proc-log/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proc-log/package.json" } ], "concludedValue": "node_modules/proc-log/package.json" } ] }, "tags": [ "emit" ] }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "prebuild-install", "version": "7.1.3", "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prebuild-install@7.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/prebuild/prebuild-install" }, { "type": "vcs", "url": "https://github.com/prebuild/prebuild-install.git" } ], "type": "library", "bom-ref": "pkg:npm/prebuild-install@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/prebuild-install/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prebuild-install/package.json" } ], "concludedValue": "node_modules/prebuild-install/package.json" } ] } }, { "authors": [ { "name": "Lukas Geiger" } ], "group": "", "name": "node-abi", "version": "3.98.0", "description": "Get the Node ABI for a given target and runtime, and vice versa.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-abi@3.98.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/electron/node-abi#readme" }, { "type": "vcs", "url": "git+https://github.com/electron/node-abi.git" } ], "type": "library", "bom-ref": "pkg:npm/node-abi@3.98.0", "properties": [ { "name": "SrcFile", "value": "node_modules/prebuild-install/node_modules/node-abi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prebuild-install/node_modules/node-abi/package.json" } ], "concludedValue": "node_modules/prebuild-install/node_modules/node-abi/package.json" } ] } }, { "authors": [ { "name": "Jim Schlight" } ], "group": "", "name": "napi-build-utils", "version": "2.0.0", "description": "A set of utilities to assist developers of tools that build N-API native add-ons", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/napi-build-utils@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspiredware/napi-build-utils#readme" }, { "type": "vcs", "url": "git+https://github.com/inspiredware/napi-build-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/napi-build-utils@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/prebuild-install/node_modules/napi-build-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prebuild-install/node_modules/napi-build-utils/package.json" } ], "concludedValue": "node_modules/prebuild-install/node_modules/napi-build-utils/package.json" } ] }, "tags": [ "tools" ] }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "prebuild", "version": "13.0.1", "description": "A command line tool for easily making prebuilt binaries for multiple versions of node, electron or node-webkit on a specific platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prebuild@13.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/prebuild/prebuild" }, { "type": "vcs", "url": "https://github.com/prebuild/prebuild.git" } ], "type": "library", "bom-ref": "pkg:npm/prebuild@13.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/prebuild/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prebuild/package.json" } ], "concludedValue": "node_modules/prebuild/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "authors": [ { "name": "Braveg1rl " } ], "group": "", "name": "performance-now", "version": "2.1.0", "description": "Implements performance.now (based on process.hrtime).", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/performance-now@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/braveg1rl/performance-now" }, { "type": "vcs", "url": "git://github.com/braveg1rl/performance-now.git" } ], "type": "library", "bom-ref": "pkg:npm/performance-now@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/performance-now/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/performance-now/package.json" } ], "concludedValue": "node_modules/performance-now/package.json" } ] }, "tags": [ "performance" ] }, { "authors": [ { "name": "Veselin Todorov " } ], "group": "", "name": "pathval", "version": "1.1.1", "description": "Object value retrieval given a string path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pathval@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chaijs/pathval" }, { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/pathval.git" } ], "type": "library", "bom-ref": "pkg:npm/pathval@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pathval/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pathval/package.json" } ], "concludedValue": "node_modules/pathval/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "1.11.1", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-scurry@1.11.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@1.11.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "3.1.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "path-array", "version": "1.0.1", "description": "Treat your $PATH like a JavaScript Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-array@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/node-path-array" }, { "type": "vcs", "url": "git://github.com/TooTallNate/node-path-array.git" } ], "type": "library", "bom-ref": "pkg:npm/path-array@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-array/package.json" } ], "concludedValue": "node_modules/path-array/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "package-json-from-dist", "version": "1.0.1", "description": "Load the local package.json from either src or dist folder", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package-json-from-dist@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/package-json-from-dist.git" } ], "type": "library", "bom-ref": "pkg:npm/package-json-from-dist@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package-json-from-dist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-json-from-dist/package.json" } ], "concludedValue": "node_modules/package-json-from-dist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "4.0.0", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-map@4.0.0", "type": "library", "bom-ref": "pkg:npm/p-map@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-map/package.json" } ], "concludedValue": "node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "osenv", "version": "0.1.5", "description": "Look up environment settings specific to different operating systems", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/osenv@0.1.5", "type": "library", "bom-ref": "pkg:npm/osenv@0.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/osenv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/osenv/package.json" } ], "concludedValue": "node_modules/osenv/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-tmpdir", "version": "1.0.2", "description": "Node.js os.tmpdir() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-tmpdir@1.0.2", "type": "library", "bom-ref": "pkg:npm/os-tmpdir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-tmpdir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-tmpdir/package.json" } ], "concludedValue": "node_modules/os-tmpdir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-homedir", "version": "1.0.2", "description": "Node.js 4 `os.homedir()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-homedir@1.0.2", "type": "library", "bom-ref": "pkg:npm/os-homedir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-homedir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-homedir/package.json" } ], "concludedValue": "node_modules/os-homedir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "object-assign", "version": "4.1.1", "description": "ES2015 `Object.assign()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-assign@4.1.1", "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-assign/package.json" } ], "concludedValue": "node_modules/object-assign/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.9.0", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth-sign@0.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Roger Wang (based on node-gyp)" } ], "group": "", "name": "nw-gyp", "version": "3.6.8", "description": "NW.js (node-webkit) native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nw-gyp@3.6.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nwjs/nw-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/nw-gyp@3.6.8", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/package.json" } ], "concludedValue": "node_modules/nw-gyp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.3.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/which/package.json" }, { "name": "SrcFile", "value": "node_modules/npm-which/node_modules/which/package.json" }, { "name": "SrcFile", "value": "node_modules/npm-path/node_modules/which/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/which/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "tar", "version": "2.2.2", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@2.2.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@2.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/tar/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/tar/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/tar/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "3.0.1", "description": "Strip ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@3.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/string_decoder/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "1.0.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@1.0.2", "type": "library", "bom-ref": "pkg:npm/string-width@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/string-width/package.json" } ] } }, { "group": "", "name": "semver", "version": "5.3.0", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.3.0", "type": "library", "bom-ref": "pkg:npm/semver@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/semver/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/safe-buffer/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/readable-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "npmlog", "version": "4.1.2", "description": "logger for npm", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npmlog@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npmlog.git" } ], "type": "library", "bom-ref": "pkg:npm/npmlog@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/npmlog/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/npmlog/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/npmlog/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "3.0.6", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@3.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@3.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/nopt/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/nopt/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "1.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "gauge", "version": "2.7.4", "description": "A terminal based horizontal guage", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gauge@2.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/gauge" }, { "type": "vcs", "url": "https://github.com/iarna/gauge" } ], "type": "library", "bom-ref": "pkg:npm/gauge@2.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/gauge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/gauge/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/gauge/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "are-we-there-yet", "version": "1.1.7", "description": "Keep track of the overall completion of many disparate processes", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/are-we-there-yet@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/are-we-there-yet" }, { "type": "vcs", "url": "https://github.com/iarna/are-we-there-yet.git" } ], "type": "library", "bom-ref": "pkg:npm/are-we-there-yet@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/are-we-there-yet/package.json" }, { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/are-we-there-yet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/are-we-there-yet/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/are-we-there-yet/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "aproba", "version": "1.2.0", "description": "A ridiculously light-weight argument validator (now browser friendly)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aproba@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/aproba" }, { "type": "vcs", "url": "https://github.com/iarna/aproba" } ], "type": "library", "bom-ref": "pkg:npm/aproba@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/aproba/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/aproba/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/aproba/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "2.1.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@2.1.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nw-gyp/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nw-gyp/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/nw-gyp/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "number-is-nan", "version": "1.0.1", "description": "ES2015 Number.isNaN() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/number-is-nan@1.0.1", "type": "library", "bom-ref": "pkg:npm/number-is-nan@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/number-is-nan/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/number-is-nan/package.json" } ], "concludedValue": "node_modules/number-is-nan/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npmlog", "version": "7.0.1", "description": "logger for npm", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npmlog@7.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npmlog.git" } ], "type": "library", "bom-ref": "pkg:npm/npmlog@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npmlog/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npmlog/package.json" } ], "concludedValue": "node_modules/npmlog/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley" } ], "group": "", "name": "npm-which", "version": "3.0.1", "description": "Locate a program or locally installed node module's executable", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-which@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/timoxley/npm-which" }, { "type": "vcs", "url": "https://github.com/timoxley/npm-which.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-which@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-which/package.json" } ], "concludedValue": "node_modules/npm-which/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley" } ], "group": "", "name": "npm-path", "version": "2.0.4", "description": "Get a PATH with all executables available to npm scripts.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-path@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/timoxley/npm-path" }, { "type": "vcs", "url": "https://github.com/timoxley/npm-path.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-path@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-path/package.json" } ], "concludedValue": "node_modules/npm-path/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "nopt", "version": "7.2.1", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@7.2.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@7.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "group": "", "name": "noop-logger", "version": "0.1.1", "description": "A logger that does exactly nothing.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/noop-logger@0.1.1", "type": "library", "bom-ref": "pkg:npm/noop-logger@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/noop-logger/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/noop-logger/package.json" } ], "concludedValue": "node_modules/noop-logger/package.json" } ] } }, { "authors": [ { "name": "Joshua Wise " } ], "group": "", "name": "nodemark", "version": "0.3.0", "description": "A modern benchmarking library for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nodemark@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshuaWise/nodemark#readme" }, { "type": "vcs", "url": "git+https://github.com/JoshuaWise/nodemark.git" } ], "type": "library", "bom-ref": "pkg:npm/nodemark@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nodemark/package.json" }, { "name": "ImportedModules", "value": "nodemark" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nodemark/package.json" } ], "concludedValue": "node_modules/nodemark/package.json" } ], "occurrences": [ { "location": "benchmark/benchmark.js", "line": 3 } ] } }, { "authors": [ { "name": "Pieter Hintjens " } ], "group": "", "name": "node-ninja", "version": "1.0.2", "description": "Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-ninja@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/codejockey/node-ninja.git" } ], "type": "library", "bom-ref": "pkg:npm/node-ninja@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/node-ninja/package.json" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/package.json" } ], "concludedValue": "node_modules/node-ninja/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "5.7.2", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@5.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/semver/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "npmlog", "version": "2.0.4", "description": "logger for npm", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npmlog@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npmlog.git" } ], "type": "library", "bom-ref": "pkg:npm/npmlog@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/npmlog/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/npmlog/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/npmlog/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "gauge", "version": "1.2.7", "description": "A terminal based horizontal guage", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gauge@1.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/gauge" }, { "type": "vcs", "url": "https://github.com/iarna/gauge" } ], "type": "library", "bom-ref": "pkg:npm/gauge@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/node-ninja/node_modules/gauge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-ninja/node_modules/gauge/package.json" } ], "concludedValue": "node_modules/node-ninja/node_modules/gauge/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "node-gyp", "version": "10.3.1", "description": "Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-gyp@10.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp@10.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/package.json" } ], "concludedValue": "node_modules/node-gyp/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "which", "version": "4.0.0", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/node_modules/which/package.json" } ], "concludedValue": "node_modules/node-gyp/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "3.1.5", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@3.1.5", "type": "library", "bom-ref": "pkg:npm/isexe@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/node_modules/isexe/package.json" } ], "concludedValue": "node_modules/node-gyp/node_modules/isexe/package.json" } ] } }, { "group": "", "name": "node-api-headers", "version": "1.9.0", "description": "Node-API headers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-api-headers@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/node-api-headers" }, { "type": "vcs", "url": "git://github.com/nodejs/node-api-headers.git" } ], "type": "library", "bom-ref": "pkg:npm/node-api-headers@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-api-headers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-api-headers/package.json" } ], "concludedValue": "node_modules/node-api-headers/package.json" } ] } }, { "group": "", "name": "node-addon-api", "version": "7.1.1", "description": "Node.js API (Node-API)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-addon-api@7.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/node-addon-api" }, { "type": "vcs", "url": "git://github.com/nodejs/node-addon-api.git" } ], "type": "library", "bom-ref": "pkg:npm/node-addon-api@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/node-addon-api/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-addon-api/package.json" } ], "concludedValue": "node_modules/node-addon-api/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Lukas Geiger" } ], "group": "", "name": "node-abi", "version": "4.37.0", "description": "Get the Node ABI for a given target and runtime, and vice versa.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-abi@4.37.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/electron/node-abi#readme" }, { "type": "vcs", "url": "git+https://github.com/electron/node-abi.git" } ], "type": "library", "bom-ref": "pkg:npm/node-abi@4.37.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-abi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-abi/package.json" } ], "concludedValue": "node_modules/node-abi/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "next-tick", "version": "1.1.0", "description": "Environment agnostic nextTick polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/next-tick@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/next-tick.git" } ], "type": "framework", "bom-ref": "pkg:npm/next-tick@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/next-tick/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/next-tick/package.json" } ], "concludedValue": "node_modules/next-tick/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "negotiator", "version": "0.6.4", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@0.6.4", "type": "library", "bom-ref": "pkg:npm/negotiator@0.6.4", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "authors": [ { "name": "Jim Schlight" } ], "group": "", "name": "napi-build-utils", "version": "1.0.2", "description": "A set of utilities to assist developers of tools that build N-API native add-ons", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/napi-build-utils@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspiredware/napi-build-utils#readme" }, { "type": "vcs", "url": "git+https://github.com/inspiredware/napi-build-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/napi-build-utils@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/napi-build-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/napi-build-utils/package.json" } ], "concludedValue": "node_modules/napi-build-utils/package.json" } ] }, "tags": [ "tools" ] }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "11.8.0", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@11.8.0", "externalReferences": [ { "type": "website", "url": "https://mochajs.org/" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@11.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "mkdirp-classic", "version": "0.5.3", "description": "Mirror of mkdirp 0.5.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp-classic@0.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/mkdirp-classic" }, { "type": "vcs", "url": "https://github.com/mafintosh/mkdirp-classic.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp-classic@0.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp-classic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp-classic/package.json" } ], "concludedValue": "node_modules/mkdirp-classic/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.6", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "2.1.2", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/minizlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minizlib/package.json" } ], "concludedValue": "node_modules/minizlib/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-sized", "version": "1.0.3", "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-sized@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-sized.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-sized@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-sized/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-sized/package.json" } ], "concludedValue": "node_modules/minipass-sized/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-pipeline", "version": "1.2.4", "description": "create a pipeline of streams using Minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-pipeline@1.2.4", "type": "library", "bom-ref": "pkg:npm/minipass-pipeline@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-pipeline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-pipeline/package.json" } ], "concludedValue": "node_modules/minipass-pipeline/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-flush", "version": "1.0.7", "description": "A Minipass stream that calls a flush function before emitting 'end'", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-flush@1.0.7", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-flush.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-flush@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-flush/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/package.json" } ], "concludedValue": "node_modules/minipass-flush/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "minipass-fetch", "version": "3.0.5", "description": "An implementation of window.fetch in Node.js using Minipass streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-fetch@3.0.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/minipass-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-fetch@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-fetch/package.json" } ], "concludedValue": "node_modules/minipass-fetch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-collect", "version": "2.0.1", "description": "A Minipass stream that collects all the data into a single chunk", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-collect@2.0.1", "type": "library", "bom-ref": "pkg:npm/minipass-collect@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-collect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-collect/package.json" } ], "concludedValue": "node_modules/minipass-collect/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "9.0.9", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@9.0.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@9.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "3.1.0", "description": "Mimic a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@3.1.0", "type": "library", "bom-ref": "pkg:npm/mimic-response@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/mimic-response/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Tommy Messbauer" } ], "group": "", "name": "memory-stream", "version": "1.0.0", "description": "Node.js streams implementation for buffered memory writes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/memory-stream@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/doanythingfordethklok/memory-stream" }, { "type": "vcs", "url": "git://github.com/doanythingfordethklok/memory-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/memory-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/memory-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/memory-stream/package.json" } ], "concludedValue": "node_modules/memory-stream/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "memoizee", "version": "0.4.17", "description": "Memoize/cache function results", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/memoizee@0.4.17", "type": "library", "bom-ref": "pkg:npm/memoizee@0.4.17", "properties": [ { "name": "SrcFile", "value": "node_modules/memoizee/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/memoizee/package.json" } ], "concludedValue": "node_modules/memoizee/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "math-intrinsics", "version": "1.1.0", "description": "ES Math-related intrinsics and helpers, robustly cached.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/math-intrinsics#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/math-intrinsics.git" } ], "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/math-intrinsics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/math-intrinsics/package.json" } ], "concludedValue": "node_modules/math-intrinsics/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "make-fetch-happen", "version": "13.0.1", "description": "Opinionated, caching, retrying fetch client", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-fetch-happen@13.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/make-fetch-happen.git" } ], "type": "library", "bom-ref": "pkg:npm/make-fetch-happen@13.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/make-fetch-happen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-fetch-happen/package.json" } ], "concludedValue": "node_modules/make-fetch-happen/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "lru-queue", "version": "0.1.0", "description": "LRU Queue", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-queue@0.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/lru-queue.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-queue/package.json" } ], "concludedValue": "node_modules/lru-queue/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "10.4.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@10.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@10.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Veselin Todorov " } ], "group": "", "name": "loupe", "version": "2.3.7", "description": "Inspect utility for Node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/loupe@2.3.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chaijs/loupe" }, { "type": "vcs", "url": "https://github.com/chaijs/loupe" } ], "type": "library", "bom-ref": "pkg:npm/loupe@2.3.7", "properties": [ { "name": "SrcFile", "value": "node_modules/loupe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loupe/package.json" } ], "concludedValue": "node_modules/loupe/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "log-symbols", "version": "4.1.0", "description": "Colored symbols for various log levels. Example: `✔︎ Success`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/log-symbols@4.1.0", "type": "library", "bom-ref": "pkg:npm/log-symbols@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/log-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/log-symbols/package.json" } ], "concludedValue": "node_modules/log-symbols/package.json" } ] }, "tags": [ "log" ] }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.uniq", "version": "4.5.0", "description": "The lodash method `_.uniq` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.uniq@4.5.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.uniq@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.uniq/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.uniq/package.json" } ], "concludedValue": "node_modules/lodash.uniq/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.padstart", "version": "4.6.1", "description": "The lodash method `_.padStart` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.padstart@4.6.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.padstart@4.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.padstart/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.padstart/package.json" } ], "concludedValue": "node_modules/lodash.padstart/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.padend", "version": "4.6.1", "description": "The lodash method `_.padEnd` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.padend@4.6.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.padend@4.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.padend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.padend/package.json" } ], "concludedValue": "node_modules/lodash.padend/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.pad", "version": "4.5.1", "description": "The lodash method `_.pad` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.pad@4.5.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.pad@4.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.pad/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.pad/package.json" } ], "concludedValue": "node_modules/lodash.pad/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.2", "description": "utilities for primitive JavaScript types", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsprim@1.4.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-jsprim.git" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jsprim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsprim/package.json" } ], "concludedValue": "node_modules/jsprim/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "jsonist", "version": "2.1.2", "description": "A simple wrapper around for dealing with JSON web APIs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonist@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/jsonist" }, { "type": "vcs", "url": "https://github.com/rvagg/jsonist.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonist@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonist/package.json" } ], "concludedValue": "node_modules/jsonist/package.json" } ] }, "tags": [ "json", "web" ] }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "jsonfile", "version": "6.2.1", "description": "Easily read/write JSON files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonfile@6.2.1", "type": "library", "bom-ref": "pkg:npm/jsonfile@6.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonfile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonfile/package.json" } ], "concludedValue": "node_modules/jsonfile/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.1", "description": "Like JSON.stringify, but doesn't blow up on circular refs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/json-stringify-safe" }, { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "json-schema-traverse", "version": "0.4.1", "description": "Traverse JSON Schema passing each schema object to callback", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/json-schema-traverse#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-traverse/package.json" } ], "concludedValue": "node_modules/json-schema-traverse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "json-schema", "version": "0.4.0", "description": "JSON Schema validation and specifications", "scope": "optional", "licenses": [ { "expression": "AFL-2.1 OR BSD-3-Clause" } ], "purl": "pkg:npm/json-schema@0.4.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kriszyp/json-schema" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema/package.json" } ], "concludedValue": "node_modules/json-schema/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Tom Wu" } ], "group": "", "name": "jsbn", "version": "0.1.1", "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andyperlitch/jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsbn/package.json" } ], "concludedValue": "node_modules/jsbn/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "4.3.2", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@4.3.2", "type": "library", "bom-ref": "pkg:npm/js-yaml@4.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "jackspeak", "version": "3.4.3", "description": "A very strict and proper argument parser.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jackspeak@3.4.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/jackspeak.git" } ], "type": "library", "bom-ref": "pkg:npm/jackspeak@3.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jackspeak/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jackspeak/package.json" } ], "concludedValue": "node_modules/jackspeak/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "isstream", "version": "0.1.2", "description": "Determine if an object is a Stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/isstream" }, { "type": "vcs", "url": "https://github.com/rvagg/isstream.git" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/isstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isstream/package.json" } ], "concludedValue": "node_modules/isstream/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "0.0.1", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "0.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-unicode-supported@0.1.0", "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "is-typedarray", "version": "1.0.0", "description": "Detect whether or not an object is a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/is-typedarray" }, { "type": "vcs", "url": "git://github.com/hughsk/is-typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typedarray/package.json" } ], "concludedValue": "node_modules/is-typedarray/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "is-promise", "version": "2.2.2", "description": "Test whether an object looks like a promises-a+ promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-promise@2.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/then/is-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/is-promise@2.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-promise/package.json" } ], "concludedValue": "node_modules/is-promise/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "2.1.0", "description": "Check if a value is a plain object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-obj@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "3.0.3", "description": "Check if a path is inside another path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-path-inside@3.0.3", "type": "library", "bom-ref": "pkg:npm/is-path-inside@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ] } }, { "authors": [ { "name": "Thomas Watson Steen (https://twitter.com/wa7son)" } ], "group": "", "name": "is-lambda", "version": "1.0.1", "description": "Detect if your code is running on an AWS Lambda server", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-lambda@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/watson/is-lambda" }, { "type": "vcs", "url": "https://github.com/watson/is-lambda.git" } ], "type": "library", "bom-ref": "pkg:npm/is-lambda@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-lambda/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-lambda/package.json" } ], "concludedValue": "node_modules/is-lambda/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Beau Gunderson (https://beaugunderson.com/)" } ], "group": "", "name": "ip-address", "version": "10.7.3", "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ip-address@10.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/beaugunderson/ip-address.git" } ], "type": "library", "bom-ref": "pkg:npm/ip-address@10.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ip-address/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ip-address/package.json" } ], "concludedValue": "node_modules/ip-address/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "ini", "version": "1.3.8", "description": "An ini encoder/decoder for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@1.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@1.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ini/package.json" } ], "concludedValue": "node_modules/ini/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "infer-owner", "version": "1.0.4", "description": "Infer the owner of a path based on the owner of its nearest existing parent", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/infer-owner@1.0.4", "type": "library", "bom-ref": "pkg:npm/infer-owner@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/infer-owner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/infer-owner/package.json" } ], "concludedValue": "node_modules/infer-owner/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "indent-string", "version": "4.0.0", "description": "Indent each line in a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/indent-string@4.0.0", "type": "library", "bom-ref": "pkg:npm/indent-string@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/indent-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indent-string/package.json" } ], "concludedValue": "node_modules/indent-string/package.json" } ] } }, { "authors": [ { "name": "Jens Taylor (https://github.com/homebrewing)" } ], "group": "", "name": "imurmurhash", "version": "0.1.4", "description": "An incremental implementation of MurmurHash3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/imurmurhash@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" }, { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" } ], "type": "library", "bom-ref": "pkg:npm/imurmurhash@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/imurmurhash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/imurmurhash/package.json" } ], "concludedValue": "node_modules/imurmurhash/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.2.1", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ieee754@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.6.3", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "hyperquest", "version": "2.1.3", "description": "make streaming http requests", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hyperquest@2.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/hyperquest" }, { "type": "vcs", "url": "git://github.com/substack/hyperquest.git" } ], "type": "library", "bom-ref": "pkg:npm/hyperquest@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hyperquest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hyperquest/package.json" } ], "concludedValue": "node_modules/hyperquest/package.json" } ] } }, { "authors": [ { "name": "dead-horse (http://deadhorse.me)" } ], "group": "", "name": "humanize-ms", "version": "1.2.1", "description": "transform humanize time to ms", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/humanize-ms@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/node-modules/humanize-ms" } ], "type": "library", "bom-ref": "pkg:npm/humanize-ms@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/humanize-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/humanize-ms/package.json" } ], "concludedValue": "node_modules/humanize-ms/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "5.0.1", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@5.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/node-https-proxy-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "1.2.0", "description": "Reference implementation of Joyent's HTTP Signature scheme.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-signature@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-http-signature/" }, { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "7.0.2", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-proxy-agent@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/http-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Kornel Lesiński (https://kornel.ski/)" } ], "group": "", "name": "http-cache-semantics", "version": "4.3.0", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-cache-semantics@4.3.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/kornelski/http-cache-semantics.git" } ], "type": "library", "bom-ref": "pkg:npm/http-cache-semantics@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/http-cache-semantics/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.2.0", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/he@1.2.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "has-unicode", "version": "2.0.1", "description": "Try to guess if your terminal supports unicode", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-unicode@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/has-unicode" }, { "type": "vcs", "url": "https://github.com/iarna/has-unicode" } ], "type": "library", "bom-ref": "pkg:npm/has-unicode@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/has-unicode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-unicode/package.json" } ], "concludedValue": "node_modules/has-unicode/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-tostringtag", "version": "1.0.2", "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-tostringtag@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-tostringtag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-tostringtag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-tostringtag@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-tostringtag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-tostringtag/package.json" } ], "concludedValue": "node_modules/has-tostringtag/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-symbols", "version": "1.1.0", "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-symbols@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/has-symbols#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/has-symbols.git" } ], "type": "library", "bom-ref": "pkg:npm/has-symbols@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-symbols/package.json" } ], "concludedValue": "node_modules/has-symbols/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-validator", "version": "5.1.5", "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-validator@5.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/node-har-validator" }, { "type": "vcs", "url": "https://github.com/ahmadnassri/node-har-validator.git" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@5.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/har-validator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-validator/package.json" } ], "concludedValue": "node_modules/har-validator/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-schema", "version": "2.0.0", "description": "JSON Schema for HTTP Archive (HAR)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-schema@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/har-schema" }, { "type": "vcs", "url": "https://github.com/ahmadnassri/har-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/har-schema@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/har-schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-schema/package.json" } ], "concludedValue": "node_modules/har-schema/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "gopd", "version": "1.2.0", "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gopd@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/gopd#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/gopd.git" } ], "type": "library", "bom-ref": "pkg:npm/gopd@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gopd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gopd/package.json" } ], "concludedValue": "node_modules/gopd/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "10.5.0", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@10.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@10.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "github-from-package", "version": "0.0.0", "description": "return the github url from a package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/github-from-package@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/github-from-package" }, { "type": "vcs", "url": "git://github.com/substack/github-from-package.git" } ], "type": "library", "bom-ref": "pkg:npm/github-from-package@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/github-from-package/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/github-from-package/package.json" } ], "concludedValue": "node_modules/github-from-package/package.json" } ] } }, { "group": "", "name": "beep-boop", "version": "1.2.3", "scope": "optional", "purl": "pkg:npm/beep-boop@1.2.3", "type": "library", "bom-ref": "pkg:npm/beep-boop@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/github-from-package/example/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/github-from-package/example/package.json" } ], "concludedValue": "node_modules/github-from-package/example/package.json" } ] } }, { "authors": [ { "name": "Rod (http://r.va.gg/)" } ], "group": "", "name": "ghutils", "version": "3.2.6", "description": "A collection of utility functions for dealing with the GitHub API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ghutils@3.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/ghutils.git" } ], "type": "library", "bom-ref": "pkg:npm/ghutils@3.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/ghutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ghutils/package.json" } ], "concludedValue": "node_modules/ghutils/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "ghrepos", "version": "2.1.0", "description": "Interact with the GitHub repos API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ghrepos@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/ghrepos.git" } ], "type": "library", "bom-ref": "pkg:npm/ghrepos@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ghrepos/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ghrepos/package.json" } ], "concludedValue": "node_modules/ghrepos/package.json" } ] } }, { "authors": [ { "name": "Magnus Skog " } ], "group": "", "name": "ghreleases", "version": "3.0.2", "description": "Interact with the GitHub releases API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ghreleases@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ralphtheninja/ghreleases.git" } ], "type": "library", "bom-ref": "pkg:npm/ghreleases@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ghreleases/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ghreleases/package.json" } ], "concludedValue": "node_modules/ghreleases/package.json" } ] } }, { "authors": [ { "name": "Alex Wilson " } ], "group": "", "name": "getpass", "version": "0.1.7", "description": "getpass for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-getpass.git" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/getpass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getpass/package.json" } ], "concludedValue": "node_modules/getpass/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-proto", "version": "1.0.1", "description": "Robustly get the [[Prototype]] of an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/get-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-proto/package.json" } ], "concludedValue": "node_modules/get-proto/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-intrinsic", "version": "1.3.0", "description": "Get and robustly cache all JS language-level intrinsics at first require time", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-intrinsic@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-intrinsic#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-intrinsic.git" } ], "type": "library", "bom-ref": "pkg:npm/get-intrinsic@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-intrinsic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-intrinsic/package.json" } ], "concludedValue": "node_modules/get-intrinsic/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://alogicalparadox.com)" } ], "group": "", "name": "get-func-name", "version": "2.0.2", "description": "Utility for getting a function's name for node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-func-name@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/get-func-name.git" } ], "type": "library", "bom-ref": "pkg:npm/get-func-name@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/get-func-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-func-name/package.json" } ], "concludedValue": "node_modules/get-func-name/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "gauge", "version": "5.0.2", "description": "A terminal based horizontal gauge", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gauge@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/gauge" }, { "type": "vcs", "url": "git+https://github.com/npm/gauge.git" } ], "type": "library", "bom-ref": "pkg:npm/gauge@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/gauge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gauge/package.json" } ], "concludedValue": "node_modules/gauge/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fstream", "version": "1.0.12", "description": "Advanced file system stream things", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fstream@1.0.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fstream.git" } ], "type": "library", "bom-ref": "pkg:npm/fstream@1.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/fstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fstream/package.json" } ], "concludedValue": "node_modules/fstream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "fs-minipass", "version": "3.0.3", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-minipass@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass#readme" }, { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-minipass@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-minipass/package.json" } ], "concludedValue": "node_modules/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "11.4.1", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@11.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "git+https://github.com/jprichardson/node-fs-extra.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@11.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "ImportedModules", "value": "fs-extra" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ], "occurrences": [ { "location": "benchmark/seed.js", "line": 2 } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "fs-constants", "version": "1.0.0", "description": "Require constants across node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-constants@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/fs-constants" }, { "type": "vcs", "url": "https://github.com/mafintosh/fs-constants.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-constants@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-constants/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-constants/package.json" } ], "concludedValue": "node_modules/fs-constants/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "4.0.6", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/form-data@4.0.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@4.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/package.json" } ], "concludedValue": "node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "forever-agent", "version": "0.6.1", "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/forever-agent" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/forever-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forever-agent/package.json" } ], "concludedValue": "node_modules/forever-agent/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "3.3.1", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@3.3.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "Ruben Verborgh (https://ruben.verborgh.org/)" } ], "group": "", "name": "follow-redirects", "version": "1.16.1", "description": "HTTP and HTTPS modules that follow redirects.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/follow-redirects@1.16.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/follow-redirects/follow-redirects" }, { "type": "vcs", "url": "git+ssh://git@github.com/follow-redirects/follow-redirects.git" } ], "type": "library", "bom-ref": "pkg:npm/follow-redirects@1.16.1", "properties": [ { "name": "SrcFile", "value": "node_modules/follow-redirects/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/follow-redirects/package.json" } ], "concludedValue": "node_modules/follow-redirects/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughskennedy.com)" } ], "group": "", "name": "flat", "version": "5.0.2", "description": "Take a nested Javascript object and flatten it, or unflatten an object with delimited keys", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/flat@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/flat" }, { "type": "vcs", "url": "git://github.com/hughsk/flat.git" } ], "type": "library", "bom-ref": "pkg:npm/flat@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/flat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat/package.json" } ], "concludedValue": "node_modules/flat/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "5.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@5.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "file-uri-to-path", "version": "1.0.0", "description": "Convert a file: URI to a file path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/file-uri-to-path@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/file-uri-to-path" }, { "type": "vcs", "url": "git://github.com/TooTallNate/file-uri-to-path.git" } ], "type": "library", "bom-ref": "pkg:npm/file-uri-to-path@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/file-uri-to-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/file-uri-to-path/package.json" } ], "concludedValue": "node_modules/file-uri-to-path/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "fast-json-stable-stringify", "version": "2.1.0", "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-json-stable-stringify/package.json" } ], "concludedValue": "node_modules/fast-json-stable-stringify/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "fast-fifo", "version": "1.3.2", "description": "A fast fifo implementation similar to the one powering nextTick in Node.js core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-fifo@1.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/fast-fifo" }, { "type": "vcs", "url": "https://github.com/mafintosh/fast-fifo.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-fifo@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-fifo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-fifo/package.json" } ], "concludedValue": "node_modules/fast-fifo/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "fast-deep-equal", "version": "3.1.3", "description": "Fast deep equal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-deep-equal@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-deep-equal#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/fast-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-deep-equal/package.json" } ], "concludedValue": "node_modules/fast-deep-equal/package.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "description": "extended POSIX-style sprintf", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davepacheco/node-extsprintf.git" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/extsprintf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extsprintf/package.json" } ], "concludedValue": "node_modules/extsprintf/package.json" } ] } }, { "authors": [ { "name": "Stefan Thomas (http://www.justmoon.net)" } ], "group": "", "name": "extend", "version": "3.0.2", "description": "Port of jQuery.extend for node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/justmoon/node-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extend/package.json" } ], "concludedValue": "node_modules/extend/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "ext", "version": "1.7.0", "description": "JavaScript utilities with respect to emerging standard", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ext@1.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/medikoo/es5-ext#ext" } ], "type": "library", "bom-ref": "pkg:npm/ext@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ext/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ext/package.json" } ], "concludedValue": "node_modules/ext/package.json" } ] } }, { "authors": [ { "name": "Sami Sayegh" } ], "group": "", "name": "exponential-backoff", "version": "3.1.3", "description": "A utility that allows retrying a function with an exponential delay between attempts.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/exponential-backoff@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/coveooss/exponential-backoff#readme" }, { "type": "vcs", "url": "git+https://github.com/coveooss/exponential-backoff.git" } ], "type": "library", "bom-ref": "pkg:npm/exponential-backoff@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/exponential-backoff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exponential-backoff/package.json" } ], "concludedValue": "node_modules/exponential-backoff/package.json" } ] } }, { "authors": [ { "name": "LM " } ], "group": "", "name": "expand-template", "version": "2.0.3", "description": "Expand placeholders in a template string", "scope": "optional", "licenses": [ { "expression": "MIT OR WTFPL" } ], "purl": "pkg:npm/expand-template@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ralphtheninja/expand-template" }, { "type": "vcs", "url": "https://github.com/ralphtheninja/expand-template.git" } ], "type": "library", "bom-ref": "pkg:npm/expand-template@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/expand-template/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/expand-template/package.json" } ], "concludedValue": "node_modules/expand-template/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "Andreas Madsen " } ], "group": "", "name": "execspawn", "version": "1.0.1", "description": "spawn stream for child_process.exec", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execspawn@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/AndreasMadsen/execspawn.git" } ], "type": "library", "bom-ref": "pkg:npm/execspawn@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/execspawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execspawn/package.json" } ], "concludedValue": "node_modules/execspawn/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "events-universal", "version": "1.0.1", "description": "Universal wrapper for the Node.js events module", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/events-universal@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/events-universal#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/events-universal.git" } ], "type": "library", "bom-ref": "pkg:npm/events-universal@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/events-universal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/events-universal/package.json" } ], "concludedValue": "node_modules/events-universal/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "event-emitter", "version": "0.3.5", "description": "Environment agnostic event emitter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/event-emitter@0.3.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/event-emitter.git" } ], "type": "library", "bom-ref": "pkg:npm/event-emitter@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/event-emitter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/event-emitter/package.json" } ], "concludedValue": "node_modules/event-emitter/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "esniff", "version": "2.0.1", "description": "Low footprint ECMAScript source code parser", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esniff@2.0.1", "type": "library", "bom-ref": "pkg:npm/esniff@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esniff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esniff/package.json" } ], "concludedValue": "node_modules/esniff/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "4.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@4.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-weak-map", "version": "2.0.3", "description": "ECMAScript6 WeakMap polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-weak-map@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/es6-weak-map.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-weak-map@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-weak-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-weak-map/package.json" } ], "concludedValue": "node_modules/es6-weak-map/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-symbol", "version": "3.1.4", "description": "ECMAScript 6 Symbol polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-symbol@3.1.4", "type": "library", "bom-ref": "pkg:npm/es6-symbol@3.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-symbol/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-symbol/package.json" } ], "concludedValue": "node_modules/es6-symbol/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-iterator", "version": "2.0.3", "description": "Iterator abstraction based on ES6 specification", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-iterator@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/es6-iterator.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-iterator@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-iterator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-iterator/package.json" } ], "concludedValue": "node_modules/es6-iterator/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es5-ext", "version": "0.10.64", "description": "ECMAScript extensions and shims", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es5-ext@0.10.64", "type": "library", "bom-ref": "pkg:npm/es5-ext@0.10.64", "properties": [ { "name": "SrcFile", "value": "node_modules/es5-ext/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es5-ext/package.json" } ], "concludedValue": "node_modules/es5-ext/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-set-tostringtag", "version": "2.1.0", "description": "A helper to optimistically set Symbol.toStringTag, when possible.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-set-tostringtag@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/es-set-tostringtag#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/es-set-tostringtag.git" } ], "type": "library", "bom-ref": "pkg:npm/es-set-tostringtag@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-set-tostringtag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-set-tostringtag/package.json" } ], "concludedValue": "node_modules/es-set-tostringtag/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-object-atoms", "version": "1.1.2", "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-object-atoms@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-object-atoms#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-object-atoms.git" } ], "type": "library", "bom-ref": "pkg:npm/es-object-atoms@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/es-object-atoms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-object-atoms/package.json" } ], "concludedValue": "node_modules/es-object-atoms/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-define-property", "version": "1.0.1", "description": "`Object.defineProperty`, but not IE 8's broken one.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-define-property@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-define-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-define-property.git" } ], "type": "library", "bom-ref": "pkg:npm/es-define-property@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es-define-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-define-property/package.json" } ], "concludedValue": "node_modules/es-define-property/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "err-code", "version": "2.0.3", "description": "Create an error with a code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/err-code@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/js-err-code.git" } ], "type": "library", "bom-ref": "pkg:npm/err-code@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/err-code/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/err-code/package.json" } ], "concludedValue": "node_modules/err-code/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "env-paths", "version": "2.2.1", "description": "Get paths for storing things like data, config, cache, etc", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-paths@2.2.1", "type": "library", "bom-ref": "pkg:npm/env-paths@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/env-paths/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-paths/package.json" } ], "concludedValue": "node_modules/env-paths/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "end-of-stream", "version": "1.4.5", "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/end-of-stream@1.4.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/end-of-stream" }, { "type": "vcs", "url": "git://github.com/mafintosh/end-of-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/end-of-stream@1.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/end-of-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/end-of-stream/package.json" } ], "concludedValue": "node_modules/end-of-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Andris Reinman" } ], "group": "", "name": "encoding", "version": "0.1.13", "description": "Convert encodings, uses iconv-lite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/encoding@0.1.13", "type": "library", "bom-ref": "pkg:npm/encoding@0.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/encoding/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/encoding/package.json" } ], "concludedValue": "node_modules/encoding/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "9.2.2", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@9.2.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@9.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Jeremie Miller (http://jeremie.com/)" } ], "group": "", "name": "ecc-jsbn", "version": "0.1.2", "description": "ECC JS code based on JSBN", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn" }, { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ecc-jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ecc-jsbn/package.json" } ], "concludedValue": "node_modules/ecc-jsbn/package.json" } ] } }, { "authors": [ { "name": "Masaki Komagata" } ], "group": "", "name": "eastasianwidth", "version": "0.2.0", "description": "Get East Asian Width from a character.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eastasianwidth@0.2.0", "type": "library", "bom-ref": "pkg:npm/eastasianwidth@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eastasianwidth/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eastasianwidth/package.json" } ], "concludedValue": "node_modules/eastasianwidth/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "each-series-async", "version": "1.0.1", "description": "Asynchronously calls a function on each element in an array in series.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/each-series-async@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/each-series-async" } ], "type": "library", "bom-ref": "pkg:npm/each-series-async@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/each-series-async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/each-series-async/package.json" } ], "concludedValue": "node_modules/each-series-async/package.json" } ] } }, { "authors": [ { "name": "Conrad Pankoff (http://www.fknsrs.biz/)" } ], "group": "", "name": "duplexer2", "version": "0.0.2", "description": "Like duplexer (http://npm.im/duplexer) but using streams2", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/duplexer2@0.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/deoxxa/duplexer2.git" } ], "type": "library", "bom-ref": "pkg:npm/duplexer2@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer2/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer2/package.json" } ], "concludedValue": "node_modules/duplexer2/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.1.14", "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer2/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer2/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/duplexer2/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "dunder-proto", "version": "1.0.1", "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dunder-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/dunder-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/dunder-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/dunder-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dunder-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dunder-proto/package.json" } ], "concludedValue": "node_modules/dunder-proto/package.json" } ] } }, { "group": "", "name": "diff", "version": "7.0.0", "description": "A JavaScript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@7.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Lovell Fuller " } ], "group": "", "name": "detect-libc", "version": "2.1.2", "description": "Node.js module to detect the C standard library (libc) implementation family and version", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-libc@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/lovell/detect-libc.git" } ], "type": "library", "bom-ref": "pkg:npm/detect-libc@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-libc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-libc/package.json" } ], "concludedValue": "node_modules/detect-libc/package.json" } ] } }, { "group": "", "name": "delegates", "version": "1.0.0", "description": "delegate methods and accessors to another property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delegates@1.0.0", "type": "library", "bom-ref": "pkg:npm/delegates@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delegates/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delegates/package.json" } ], "concludedValue": "node_modules/delegates/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "delayed-stream", "version": "1.0.0", "description": "Buffers events from a stream until you are ready to handle them.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-delayed-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-delayed-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delayed-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delayed-stream/package.json" } ], "concludedValue": "node_modules/delayed-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Viacheslav Lotsmanov " } ], "group": "", "name": "deep-extend", "version": "0.6.0", "description": "Recursive object extending", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-extend@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unclechu/node-deep-extend" }, { "type": "vcs", "url": "git://github.com/unclechu/node-deep-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-extend@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-extend/package.json" } ], "concludedValue": "node_modules/deep-extend/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "deep-eql", "version": "4.1.4", "description": "Improved deep equality testing for Node.js and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-eql@4.1.4", "type": "library", "bom-ref": "pkg:npm/deep-eql@4.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-eql/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-eql/package.json" } ], "concludedValue": "node_modules/deep-eql/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "decompress-response", "version": "6.0.0", "description": "Decompress a HTTP response if needed", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decompress-response@6.0.0", "type": "library", "bom-ref": "pkg:npm/decompress-response@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-response/package.json" } ], "concludedValue": "node_modules/decompress-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "4.0.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@4.0.0", "type": "library", "bom-ref": "pkg:npm/decamelize@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Trent Mick (http://trentm.com)" } ], "group": "", "name": "dashdash", "version": "1.14.1", "description": "A light, featureful and explicit option parsing library.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/trentm/node-dashdash.git" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dashdash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dashdash/package.json" } ], "concludedValue": "node_modules/dashdash/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "d", "version": "1.0.2", "description": "Property descriptor factory", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/d@1.0.2", "type": "library", "bom-ref": "pkg:npm/d@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/d/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/d/package.json" } ], "concludedValue": "node_modules/d/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org/)" } ], "group": "", "name": "console-control-strings", "version": "1.1.0", "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/console-control-strings@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/console-control-strings" } ], "type": "library", "bom-ref": "pkg:npm/console-control-strings@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/console-control-strings/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/console-control-strings/package.json" } ], "concludedValue": "node_modules/console-control-strings/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.3", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "combined-stream", "version": "1.0.8", "description": "A stream that emits multiple other streams one after another.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-combined-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-combined-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/combined-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combined-stream/package.json" } ], "concludedValue": "node_modules/combined-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "color-support", "version": "1.1.3", "description": "A module which will endeavor to guess your terminal's level of color support.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-support@1.1.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/color-support.git" } ], "type": "library", "bom-ref": "pkg:npm/color-support@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-support/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-support/package.json" } ], "concludedValue": "node_modules/color-support/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "code-point-at", "version": "1.1.0", "description": "ES2015 `String#codePointAt()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/code-point-at@1.1.0", "type": "library", "bom-ref": "pkg:npm/code-point-at@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/code-point-at/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/code-point-at/package.json" } ], "concludedValue": "node_modules/code-point-at/package.json" } ] } }, { "authors": [ { "name": "Gábor Mező aka unbornchikken" } ], "group": "", "name": "cmake-js", "version": "7.4.0", "description": "CMake.js - a Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cmake-js@7.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/cmake-js/cmake-js.git" } ], "type": "library", "bom-ref": "pkg:npm/cmake-js@7.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cmake-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cmake-js/package.json" } ], "concludedValue": "node_modules/cmake-js/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "8.0.1", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@8.0.1", "type": "library", "bom-ref": "pkg:npm/cliui@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "cli-color", "version": "2.0.4", "description": "Colors, formatting and other tools for the console", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-color@2.0.4", "type": "library", "bom-ref": "pkg:npm/cli-color@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-color/package.json" }, { "name": "ImportedModules", "value": "cli-color" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-color/package.json" } ], "concludedValue": "node_modules/cli-color/package.json" } ], "occurrences": [ { "location": "benchmark/index.js", "line": 3 } ] }, "tags": [ "tools" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "clean-stack", "version": "2.2.0", "description": "Clean up error stack traces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clean-stack@2.2.0", "type": "library", "bom-ref": "pkg:npm/clean-stack@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/clean-stack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clean-stack/package.json" } ], "concludedValue": "node_modules/clean-stack/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "2.0.0", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@2.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chownr/package.json" } ], "concludedValue": "node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "4.0.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://alogicalparadox.com)" } ], "group": "", "name": "check-error", "version": "1.0.3", "description": "Error comparison and information related utility for node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/check-error@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/check-error.git" } ], "type": "library", "bom-ref": "pkg:npm/check-error@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/check-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/check-error/package.json" } ], "concludedValue": "node_modules/check-error/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/chalk/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "chai", "version": "4.5.0", "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chai@4.5.0", "externalReferences": [ { "type": "website", "url": "http://chaijs.com" }, { "type": "vcs", "url": "https://github.com/chaijs/chai" } ], "type": "framework", "bom-ref": "pkg:npm/chai@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chai/package.json" } ], "concludedValue": "node_modules/chai/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "caseless", "version": "0.12.0", "description": "Caseless object set/get/has, very useful when working with HTTP headers.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caseless@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/caseless" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/caseless/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caseless/package.json" } ], "concludedValue": "node_modules/caseless/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "6.3.0", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@6.3.0", "type": "library", "bom-ref": "pkg:npm/camelcase@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind-apply-helpers", "version": "1.0.2", "description": "Helper functions around Function call/apply/bind, for use in `call-bind`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind-apply-helpers#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind-apply-helpers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind-apply-helpers/package.json" } ], "concludedValue": "node_modules/call-bind-apply-helpers/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "cacache", "version": "18.0.4", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacache@18.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cacache.git" } ], "type": "library", "bom-ref": "pkg:npm/cacache@18.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/package.json" } ], "concludedValue": "node_modules/cacache/package.json" } ] } }, { "group": "", "name": "buffer-from", "version": "0.1.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer-from@0.1.2", "type": "library", "bom-ref": "pkg:npm/buffer-from@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer-from/package.json" } ], "concludedValue": "node_modules/buffer-from/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "buffer", "version": "5.7.1", "description": "Node.js Buffer API, for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer@5.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/buffer" }, { "type": "vcs", "url": "git://github.com/feross/buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer@5.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer/package.json" } ], "concludedValue": "node_modules/buffer/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "2.1.7", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@2.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "block-stream", "version": "0.0.9", "description": "a stream of blocks", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/block-stream@0.0.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/block-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/block-stream@0.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/block-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/block-stream/package.json" } ], "concludedValue": "node_modules/block-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "bl", "version": "3.0.1", "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bl@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/bl" }, { "type": "vcs", "url": "https://github.com/rvagg/bl.git" } ], "type": "library", "bom-ref": "pkg:npm/bl@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/bl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bl/package.json" } ], "concludedValue": "node_modules/bl/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "bindings", "version": "1.5.0", "description": "Helper module for loading your native module's .node file", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bindings@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/node-bindings" }, { "type": "vcs", "url": "git://github.com/TooTallNate/node-bindings.git" } ], "type": "library", "bom-ref": "pkg:npm/bindings@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bindings/package.json" }, { "name": "ImportedModules", "value": "bindings" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bindings/package.json" } ], "concludedValue": "node_modules/bindings/package.json" } ], "occurrences": [ { "location": "lib/database.js", "line": 48 } ] } }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-bcrypt-pbkdf.git" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bcrypt-pbkdf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bcrypt-pbkdf/package.json" } ], "concludedValue": "node_modules/bcrypt-pbkdf/package.json" } ] } }, { "authors": [ { "name": "T. Jameson Little " } ], "group": "", "name": "base64-js", "version": "1.5.1", "description": "Base64 encoding/decoding in pure JS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/base64-js@1.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/beatgammit/base64-js" }, { "type": "vcs", "url": "git://github.com/beatgammit/base64-js.git" } ], "type": "library", "bom-ref": "pkg:npm/base64-js@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/base64-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/base64-js/package.json" } ], "concludedValue": "node_modules/base64-js/package.json" } ] } }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "bare-url", "version": "2.5.4", "description": "WHATWG URL implementation for JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bare-url@2.5.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/bare-url" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/bare-url.git" } ], "type": "library", "bom-ref": "pkg:npm/bare-url@2.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/bare-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bare-url/package.json" } ], "concludedValue": "node_modules/bare-url/package.json" } ] } }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "bare-stream", "version": "2.13.4", "description": "Streaming data for JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bare-stream@2.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/bare-stream#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/bare-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/bare-stream@2.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/bare-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bare-stream/package.json" } ], "concludedValue": "node_modules/bare-stream/package.json" } ] } }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "bare-path", "version": "3.1.2", "description": "Path manipulation library for JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bare-path@3.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/bare-path#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/bare-path.git" } ], "type": "library", "bom-ref": "pkg:npm/bare-path@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bare-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bare-path/package.json" } ], "concludedValue": "node_modules/bare-path/package.json" } ] } }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "bare-fs", "version": "4.8.4", "description": "Native file system operations for Bare", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bare-fs@4.8.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/bare-fs#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/bare-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/bare-fs@4.8.4", "properties": [ { "name": "SrcFile", "value": "node_modules/bare-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bare-fs/package.json" } ], "concludedValue": "node_modules/bare-fs/package.json" } ] } }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "bare-events", "version": "2.9.2", "description": "Event emitters for JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bare-events@2.9.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/bare-events#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/bare-events.git" } ], "type": "library", "bom-ref": "pkg:npm/bare-events@2.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bare-events/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bare-events/package.json" } ], "concludedValue": "node_modules/bare-events/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Holepunch" } ], "group": "", "name": "b4a", "version": "1.9.0", "description": "Bridging the gap between buffers and typed arrays", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/b4a@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/holepunchto/b4a#readme" }, { "type": "vcs", "url": "git+https://github.com/holepunchto/b4a.git" } ], "type": "library", "bom-ref": "pkg:npm/b4a@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/b4a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/b4a/package.json" } ], "concludedValue": "node_modules/b4a/package.json" } ] } }, { "authors": [ { "name": "Matt Zabriskie" } ], "group": "", "name": "axios", "version": "1.20.0", "description": "Promise based HTTP client for the browser and node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/axios@1.20.0", "externalReferences": [ { "type": "website", "url": "https://axios-http.com" }, { "type": "vcs", "url": "https://github.com/axios/axios.git" } ], "type": "library", "bom-ref": "pkg:npm/axios@1.20.0", "properties": [ { "name": "SrcFile", "value": "node_modules/axios/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/axios/package.json" } ], "concludedValue": "node_modules/axios/package.json" } ] } }, { "authors": [ { "name": "Michael Hart (https://github.com/mhart)" } ], "group": "", "name": "aws4", "version": "1.13.2", "description": "Signs and prepares requests using AWS Signature Version 4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws4@1.13.2", "type": "library", "bom-ref": "pkg:npm/aws4@1.13.2", "properties": [ { "name": "SrcFile", "value": "node_modules/aws4/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws4/package.json" } ], "concludedValue": "node_modules/aws4/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "aws-sign2", "version": "0.7.0", "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-sign2@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/aws-sign" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws-sign2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws-sign2/package.json" } ], "concludedValue": "node_modules/aws-sign2/package.json" } ] } }, { "authors": [ { "name": "Alex Indigo " } ], "group": "", "name": "asynckit", "version": "0.4.0", "description": "Minimal async jobs utility library, with streams support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asynckit@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexindigo/asynckit#readme" }, { "type": "vcs", "url": "git+https://github.com/alexindigo/asynckit.git" } ], "type": "library", "bom-ref": "pkg:npm/asynckit@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/asynckit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asynckit/package.json" } ], "concludedValue": "node_modules/asynckit/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://qualiancy.com)" } ], "group": "", "name": "assertion-error", "version": "1.1.0", "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assertion-error@1.1.0", "type": "framework", "bom-ref": "pkg:npm/assertion-error@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assertion-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assertion-error/package.json" } ], "concludedValue": "node_modules/assertion-error/package.json" } ] }, "tags": [ "framework", "test", "validation" ] }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "assert-plus", "version": "1.0.0", "description": "Extra assertions on top of node's assert module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcavage/node-assert-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-plus/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Joyent (joyent.com)" } ], "group": "", "name": "asn1", "version": "0.2.6", "description": "Contains parsers and serializers for ASN.1 (currently BER only)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asn1@0.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1/package.json" } ], "concludedValue": "node_modules/asn1/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "array-index", "version": "1.0.0", "description": "Invoke getter/setter functions on array-like objects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-index@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/array-index.git" } ], "type": "library", "bom-ref": "pkg:npm/array-index@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/array-index/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-index/package.json" } ], "concludedValue": "node_modules/array-index/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/array-index/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-index/node_modules/ms/package.json" } ], "concludedValue": "node_modules/array-index/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/array-index/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-index/node_modules/debug/package.json" } ], "concludedValue": "node_modules/array-index/node_modules/debug/package.json" } ] } }, { "group": "", "name": "argparse", "version": "2.0.1", "description": "CLI arguments parser. Native port of python's argparse.", "scope": "optional", "licenses": [ { "license": { "id": "Python-2.0", "url": "https://opensource.org/licenses/Python-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@2.0.1", "type": "library", "bom-ref": "pkg:npm/argparse@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "are-we-there-yet", "version": "4.0.2", "description": "Keep track of the overall completion of many disparate processes", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/are-we-there-yet@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/are-we-there-yet" }, { "type": "vcs", "url": "https://github.com/npm/are-we-there-yet.git" } ], "type": "library", "bom-ref": "pkg:npm/are-we-there-yet@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/are-we-there-yet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/are-we-there-yet/package.json" } ], "concludedValue": "node_modules/are-we-there-yet/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "aproba", "version": "2.1.0", "description": "A ridiculously light-weight argument validator (now browser friendly)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aproba@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/aproba" }, { "type": "vcs", "url": "https://github.com/iarna/aproba" } ], "type": "library", "bom-ref": "pkg:npm/aproba@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aproba/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aproba/package.json" } ], "concludedValue": "node_modules/aproba/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.4.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@6.4.0", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "ansi", "version": "0.3.1", "description": "Advanced ANSI formatting tool for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi@0.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/ansi.js.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi/package.json" } ], "concludedValue": "node_modules/ansi/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv", "version": "6.15.0", "description": "Another JSON Schema Validator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@6.15.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ajv-validator/ajv" }, { "type": "vcs", "url": "https://github.com/ajv-validator/ajv.git" } ], "type": "library", "bom-ref": "pkg:npm/ajv@6.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv/package.json" } ], "concludedValue": "node_modules/ajv/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "aggregate-error", "version": "3.1.0", "description": "Create an error from multiple errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aggregate-error@3.1.0", "type": "library", "bom-ref": "pkg:npm/aggregate-error@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aggregate-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aggregate-error/package.json" } ], "concludedValue": "node_modules/aggregate-error/package.json" } ] } }, { "authors": [ { "name": "fengmk2 (https://github.com/fengmk2)" } ], "group": "", "name": "agentkeepalive", "version": "4.6.0", "description": "Missing keepalive http.Agent", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agentkeepalive@4.6.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/node-modules/agentkeepalive.git" } ], "type": "library", "bom-ref": "pkg:npm/agentkeepalive@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/agentkeepalive/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/agentkeepalive/package.json" } ], "concludedValue": "node_modules/agentkeepalive/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "6.0.2", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agent-base@6.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/node-agent-base.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/agent-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/agent-base/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "after", "version": "0.8.2", "description": "after - tiny flow control", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/after@0.8.2", "type": "library", "bom-ref": "pkg:npm/after@0.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/after/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/after/package.json" } ], "concludedValue": "node_modules/after/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "abbrev", "version": "2.0.0", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "@tootallnate", "name": "once", "version": "1.1.2", "description": "Creates a Promise that waits for a single event", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tootallnate/once@1.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/once.git" } ], "type": "library", "bom-ref": "pkg:npm/@tootallnate/once@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@tootallnate/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tootallnate/once/package.json" } ], "concludedValue": "node_modules/@tootallnate/once/package.json" } ] } }, { "group": "@pkgjs", "name": "parseargs", "version": "0.11.0", "description": "Polyfill of future proposal for `util.parseArgs()`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pkgjs/parseargs#readme" } ], "type": "library", "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@pkgjs/parseargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pkgjs/parseargs/package.json" } ], "concludedValue": "node_modules/@pkgjs/parseargs/package.json" } ] } }, { "group": "@npmcli", "name": "move-file", "version": "1.1.2", "description": "move a file (fork of move-file)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/move-file@1.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/move-file" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/move-file@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/move-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/move-file/package.json" } ], "concludedValue": "node_modules/@npmcli/move-file/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "fs", "version": "3.1.1", "description": "filesystem utilities for the npm cli", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/fs@3.1.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/fs.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/fs@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/fs/package.json" }, { "name": "ImportedModules", "value": "fs" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/fs/package.json" } ], "concludedValue": "node_modules/@npmcli/fs/package.json" } ], "occurrences": [ { "location": "deps/copy.js", "line": 3 }, { "location": "lib/database.js", "line": 2 }, { "location": "lib/methods/backup.js", "line": 2 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "agent", "version": "2.2.2", "description": "the http/https agent used by the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/agent@2.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/agent#readme" }, { "type": "vcs", "url": "https://github.com/npm/agent.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/agent@2.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/agent/package.json" } ], "concludedValue": "node_modules/@npmcli/agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "7.0.6", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "@isaacs", "name": "cliui", "version": "8.0.2", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "type": "library", "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/cliui/package.json" } ], "concludedValue": "node_modules/@isaacs/cliui/package.json" } ] } }, { "authors": [ { "name": "Gar " } ], "group": "@gar", "name": "promisify", "version": "1.1.3", "description": "Promisify an entire class or object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40gar/promisify@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/wraithgar/gar-promisify.git" } ], "type": "library", "bom-ref": "pkg:npm/@gar/promisify@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@gar/promisify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@gar/promisify/package.json" } ], "concludedValue": "node_modules/@gar/promisify/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/better-sqlite3@12.10.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-10T08:03:00Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'better-sqlite3' with version '12.10.0'. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from 459 source files." } ] }