{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:61c42f9a-57cb-426b-8b27-acfce66486a1", "version": 1, "metadata": { "timestamp": "2026-10-11T19:30:50Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "broccoli-middleware", "group": "", "version": "0.18.1", "description": "Broccoli asset builder middleware", "purl": "pkg:npm/broccoli-middleware@0.18.1", "bom-ref": "pkg:npm/broccoli-middleware@0.18.1", "author": "Jo Liss ", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/ember-cli/broccoli-middleware" }, { "type": "vcs", "url": "https://github.com/ember-cli/broccoli-middleware" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "handlebars", "version": "4.0.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "94b4e1c39c90ad4c9d17b4727552ac4a21866c2cc5d81dca3772a5b70faa7ad2e30f9c13beec4bf28f8b6043ccf9bd3038b85bd321c36480a8b33f813c00b77c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/handlebars@4.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@4.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/handlebars" }, { "name": "cdx:npm:bin", "value": "handlebars" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "handlebars" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/middleware.js", "line": 4 } ] } }, { "group": "", "name": "async", "version": "1.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9d2560a1b938aefeb547d3d4483b58b7b98f541da8971351e51589700b07ebbebf79fd756d4670beeefe44662b61ab957433dc3b9d7dbfaf304615d0b71b15f7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async@1.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@1.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "optimist", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b273783b84e48a0ba36698562cdd04fff9d09a6efbf74458684e770dd2fb658c1e7b60fc0c3a3dfc4c9888a51f377ae77965238499ee7a28dadc6f48da2d21de" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optimist@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/optimist@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8a8b644efc5cf93c0e9b921e8a6f159d236f0838c22bd4bc1b7b1c279d19b61b294b16bb8f1e748e485876eb80b408ef7c35304a03b07fcf887fdf4094e121cb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d6d300f74efe578426c55edd6d1bdbe3ff0c69100b2baabd01b89dde774c6276f2a3ca628ac0a678e355a95497a9003729a3f848bb796fbb9de84daca8ff1317" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.4.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "63c9c87dc6f5b3fec37286d4cf5c8e3b5192a7b8322fe0fdccb1c37a14fb891112a864b18c9e38f1283baef7e0b112429ca2dd4a5d75b867f4b3d5fcd1c1f4fc" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.4.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.4.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "amdefine", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "021224dfa148c87f65b077735f1c28fda5a6d504080a177571ec141ed0b613885cccb2a04ff5a95493191b12b092f5b4ee9d419f6831c1114f79e82e1e872b40" } ], "licenses": [ { "expression": "BSD-3-Clause AND MIT" } ], "purl": "pkg:npm/amdefine@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uglify-js", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f53ec514d77bf1453137cc185086e819cab0796589998ba55c798b28346c001a7566ae661c5156fcd2ef522176b0861c2a9a796dbcee6c7bc7de95ed74dce7c9" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/uglifyjs" }, { "name": "cdx:npm:bin", "value": "uglifyjs" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "async", "version": "0.2.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "78091da0ac54ebf2e42830732e94feb7a15fe44b5f485e30c7559f2623c4115ed634b9c36915e4d28572b2210f9b6eb6ae869a72119ec7052ff785a14a03794d" } ], "purl": "pkg:npm/async@0.2.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@0.2.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.5.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "323664569d0d1ebe7e4cf8a12dc69daa7955a062285a8e08047a6dbad1a1f70237b6d518bc21b6e87912b838be2ba96c676e6cc9725771cb70832542b7fff1a8" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uglify-to-browserify", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bdbdacd65631db106d520cbeb5af9bd89fc62d5511fb09a920dc0778f98f4613ac215086db00f3289d27d781ac947d4189fb2a57348ec1085168202c67f9c8e1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-to-browserify@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yargs", "version": "3.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "405cd46a1f3c1801b2f65c8328606a65d918029b7adeb0976011989c43f8c4324f5cda975e70430029dbad79d5895ea3452a8078fc2b0138b68bc99f626e0bd4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@3.10.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yargs@3.10.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "camelcase", "version": "1.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@1.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@1.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cliui", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "188398462cc6f931a873b5a07352e23932daadef794779b32a0a259fe43f944e1c7a2607d7d814a65d25d057eae2524311fdc5c6e8cc7ba2017ce0acee97ea34" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cliui@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "center-align", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "05acf768d7b681dd8b3f6aa4e54fac0e4fe6e284aec120dc05f6b24c24c1a16a5f2063b95c5c4f9a320b4082383468998c3e83a0323a91fee029ac647fbb3755" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/center-align@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/center-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "align-text", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1ab4d92d1a66a7ac080b6cedad65bd3238d381229c71f7e015a81b343397f79fdd72311c61989b61379a3a7b724902dc770d73b41a0592f8a252f4cc6dbf4c62" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/align-text@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/align-text@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "kind-of", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "db38d77a0521c4a2615c8fc1297f5b48ad625e503b662faf3940fd293a0b9fc7f6e8bc614f1ed95b275f0bc365218bdf28c5d9bdba8e515351b444c484543bf3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kind-of@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-buffer", "version": "1.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2dd2803d9715f847d3e8fbcdf74527fd19e7d60f1c2f505fcc405dcfa77763a094cccc945561dec17c72ba234590bc112a0a433181eba1c76a8ccb184c390ea3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-buffer@1.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.4.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version of 'is-buffer' is out-of-date. You must update to v1.1.6 or newer" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "longest", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93ecade67de5e3c254e24f1fb67286e95eeedf6c321f635f2b378cb68f45fd0444d1a9b1cbf2dacb1c25be38e4644233a91fb5f48aed14ef29e6407d41a61416" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/longest@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/longest@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "repeat-string", "version": "1.5.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "18ff2a31096596536e369a391120cdb2b27b35c9667b938205f2ca9d54437efa916d5ffabb3aa67c0cf88378f1400477faaab609831a202a191b856c6095b7ce" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/repeat-string@1.5.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.5.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/repeat-string@1.5.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.5.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lazy-cache", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "444da0d1be55199b0e08538280fee899345816ac9d999901c25e68367435943602e7bbb23bd2aa367355c53ec23921d3c6b44259570054e71b8e4fadbe1feb81" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lazy-cache@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lazy-cache@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "right-align", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "caa20db4bfc6eefb36bfe7452199855036e757215424529dea02b6d8a828e91e237c9185b62b0aca77160c350b8237ea7f801242e210ca327b5d9fb7696a6c02" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/right-align@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/right-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "decamelize", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "window-size", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d694cf40329375deb5a3394a18d0a384d45df8a3e680b4866b79994c7a0e962686704483f06d4f5e187b7357e088f8d56cd55f832d856b0e0123cfe6d1c0bc32" } ], "purl": "pkg:npm/window-size@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/window-size@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mime", "version": "1.3.4", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "b006985eccc40f900b06debae45d303100945e91ae66c19da29a2a7073dd2f7f5961d8bbb87a19961adf65f86ff16ce2be1073affa17c1a8feca22b9c18f0c5d" } ], "purl": "pkg:npm/mime@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/mime" }, { "name": "cdx:npm:bin", "value": "mime" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "mime" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/middleware.js", "line": 6 } ] } }, { "group": "", "name": "jshint", "version": "2.6.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cdd88f7d99c65aa6bbd361f5af27dd93c22878a9264786db17d8a1d6d64b48f0e1626542b715503ca29e3fa4f3cedef8d4c6c46694240c7ccc1f49cb731a7b58" } ], "purl": "pkg:npm/jshint@2.6.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jshint/-/jshint-2.6.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jshint@2.6.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jshint/-/jshint-2.6.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/jshint" }, { "name": "cdx:npm:bin", "value": "jshint" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cli", "version": "0.6.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e07e88cd893bf11f9505e2777c7dd541e8dc4119063d1fa432303d9f7d2cac437e61530f24b1dfa100ed2eab88cdc2e77eb954ad503ca9241107d7dd816a5407" } ], "purl": "pkg:npm/cli@0.6.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cli/-/cli-0.6.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cli@0.6.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cli/-/cli-0.6.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "exit", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "664fde34a576cdb8e92b3aec43e9f51baa6855b12b4312742c13895da299d445622f31fe86b2eef5c757238cf0f5d05026c970044a5b4363f5a12ee70f1b3a8d" } ], "purl": "pkg:npm/exit@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/exit@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8556f4cf0119c02d455d22913c54de3ad37b000ac9709948e942c62edaecb5ab3028d96b4c9a8003ed65625494a29e2f8c0e36df1941cea7d54b78961a5a89fa" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f275aada72d3030774da34ea244c54605483fdf2aae951fd63fa06d9a71c73f91d23457df016a0f1de5ae208b75c7cfbdeb0d66b63ef4edbdc598aae2aa48434" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5855f58c8d406b13536553872c155acf04d629a423a32912cc204d5c1ef6bc34c2ce8a501adc8ff75b4a7452b972fd7ea8cc0fca24eed47a94ae2aa9948f2970" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5a989b589eb4737020033f1ada2604ac3adc4f60bb3a62a7b168487073a39141c58e45e770986d2f1352a949b147146e9e96f923c569addeda35277636d92c25" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "console-browserify", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "76e4bb54fe69bdfb0d2c3bcbd4ee153846f0dfb008dc0e1951061e9af0e59e91ab36ef6da6b47b0585a90d8c02d1789ad19c73e59ba976222b529d061f56977e" } ], "purl": "pkg:npm/console-browserify@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "date-now", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "02c125be8bf72e8341eed7f9937ec7da361207e6593cc4f9b06d908c909c76557972122fea1b4150152e8b620a46382d2802ad08137b65bc1af8cb702e349e37" } ], "purl": "pkg:npm/date-now@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/date-now@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "htmlparser2", "version": "3.8.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "841c448370985defab3c8b9af044deeed986dd70e7f41d1e74e13f7bdc07da72dccf1ce076ed26d1a34763ee701598af88b58b74034f253b2c6bdd9d31c5d0e5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/htmlparser2@3.8.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "domelementtype", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1b7f58acf77905aa5e4a468a004cec8d3540a692e77480b8ec6a9d391dd36bb1485d47240c793c1f75b4c90393828620b4a8c4160e4246485dc6073c6b06373a" } ], "purl": "pkg:npm/domelementtype@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domhandler", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "abd6d4c237e9ec489ff235b1c713d2ca47516406fa1a482e0464a0bef0ab848f7007bd56d8afcabefe04eb5085fe67027e75490de0d6c7f55bfee02a6c38fa51" } ], "purl": "pkg:npm/domhandler@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domutils", "version": "1.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "812bb93a2fc8fb7c0310d06c39606244ad5ea06c5ccb0612aa0deb47deb4ffe11f634085e045f554f9201ce6775a24bf260d83b65885e8185670795fa5851c1b" } ], "purl": "pkg:npm/domutils@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "dom-serializer", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "16a97b3d7e829903559a82dfa7b0e59af14c20be5cc0b6e6df4d92c9c03688032bf79b752135f88a522c506ef9ad8b4c8952dbe04302e5bda8ec0a44a485d13a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dom-serializer@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/dom-serializer@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domelementtype", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cc4bc002c158d0378792ba96051912b2681a13bc800e0a5ecf8d095058c849bfaecd28a797617a41b1b894c1011383f4ea008617a567b329266cd82eed9207cc" } ], "purl": "pkg:npm/domelementtype@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "entities", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6d64adb08839faf5b382d2a803fa640082734407946ad9c89aa70ae02c877762a836addf0a0fed1c3a04ffb7bcd7246af5783c5d44af01cb1268c0a9e1adc7b9" } ], "licenses": [ { "license": { "name": "BSD-like", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "entities", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2db2ea7d7809326cbcd6dfbb735e269ee9451c9d7bd1c33a13ed2f31747d93f662670817f22e693608d3097dd23b855e52c14b57ef089e2c68adeb7053e32305" } ], "licenses": [ { "license": { "name": "BSD-like", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.1.14", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f8c7958c57f82f8e1752484cd5e61b0fc7f212cc5c57cd69a8c491e606e57dc2c21df66f6ebab2e3fa981c4fbf4791e80544f5d565793b4f02af59f761791655" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0f64bedc62f1587fae86b34472887f7e799878ff04f3fcc797ae3877f8dd034836bb25efcb7b1bd2ac68b44fa77b42ed71c1e49d0cd6c1913385a93ba09d0239" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "0.10.31", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7afd90cd2cd63d89b2f46baa7c856295d03839d7062de15942bab9cace91b62b85f914108995abf1364dc8072e557c904587c43be32ca01ff506e41584e26ea1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "12387939d93fb855c08f99dffcd49793451a9aa70601f39d1c8ee7634cef087ca7e1fde728b168513a7e958c43c528a1ff8d2e5bc969c03a653961dd5a441758" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-1.0.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "shelljs", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "372d0a3787724fc652084d1faed71b0091a833f1d302ba723e47a58b5ff4d1a61f9b4b1b0ff1a4ff8c7b3760cff50286a41b22407ee7eaba66d4befd46dbe211" } ], "licenses": [ { "license": { "name": "BSD*", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shelljs@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/shjs" }, { "name": "cdx:npm:bin", "value": "shjs" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-json-comments", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "00e3c6f0405ce7002291a1b5ffbb8508d149c2728eb90c054e96017535ba3af58779905006b000fda99e7c71ab1223a708f70b1592ba1543ed5952a941521182" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/strip-json-comments" }, { "name": "cdx:npm:bin", "value": "strip-json-comments" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "underscore", "version": "1.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf8a357ef294a2321687d5ee6952d40dd7fce91422ab5dc00b57661db4e9a32baef9baae1e6b3beafd7a0a3c9c09b79cf3b27bcf493ffd2890564d2c31d166a5" } ], "purl": "pkg:npm/underscore@1.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/async@1.5.2", "dependsOn": [] }, { "ref": "pkg:npm/minimist@0.0.10", "dependsOn": [] }, { "ref": "pkg:npm/wordwrap@0.0.3", "dependsOn": [] }, { "ref": "pkg:npm/optimist@0.6.1", "dependsOn": [ "pkg:npm/minimist@0.0.10", "pkg:npm/wordwrap@0.0.3" ] }, { "ref": "pkg:npm/amdefine@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.4.4", "dependsOn": [ "pkg:npm/amdefine@1.0.0" ] }, { "ref": "pkg:npm/async@0.2.10", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.5.6", "dependsOn": [] }, { "ref": "pkg:npm/uglify-to-browserify@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/camelcase@1.2.1", "dependsOn": [] }, { "ref": "pkg:npm/is-buffer@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/kind-of@3.0.4", "dependsOn": [ "pkg:npm/is-buffer@1.1.4" ] }, { "ref": "pkg:npm/longest@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/repeat-string@1.5.4", "dependsOn": [] }, { "ref": "pkg:npm/align-text@0.1.4", "dependsOn": [ "pkg:npm/kind-of@3.0.4", "pkg:npm/longest@1.0.1", "pkg:npm/repeat-string@1.5.4" ] }, { "ref": "pkg:npm/lazy-cache@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/center-align@0.1.3", "dependsOn": [ "pkg:npm/align-text@0.1.4", "pkg:npm/lazy-cache@1.0.4" ] }, { "ref": "pkg:npm/right-align@0.1.3", "dependsOn": [ "pkg:npm/align-text@0.1.4" ] }, { "ref": "pkg:npm/wordwrap@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/cliui@2.1.0", "dependsOn": [ "pkg:npm/center-align@0.1.3", "pkg:npm/right-align@0.1.3", "pkg:npm/wordwrap@0.0.2" ] }, { "ref": "pkg:npm/decamelize@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/window-size@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/yargs@3.10.0", "dependsOn": [ "pkg:npm/camelcase@1.2.1", "pkg:npm/cliui@2.1.0", "pkg:npm/decamelize@1.2.0", "pkg:npm/window-size@0.1.0" ] }, { "ref": "pkg:npm/uglify-js@2.7.3", "dependsOn": [ "pkg:npm/async@0.2.10", "pkg:npm/source-map@0.5.6", "pkg:npm/uglify-to-browserify@1.0.2", "pkg:npm/yargs@3.10.0" ] }, { "ref": "pkg:npm/handlebars@4.0.5", "dependsOn": [ "pkg:npm/async@1.5.2", "pkg:npm/optimist@0.6.1", "pkg:npm/source-map@0.4.4", "pkg:npm/uglify-js@2.7.3" ] }, { "ref": "pkg:npm/mime@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/exit@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.3.0", "dependsOn": [ "pkg:npm/lru-cache@2.7.3", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/glob@3.2.11", "dependsOn": [ "pkg:npm/inherits@2.0.1", "pkg:npm/minimatch@0.3.0" ] }, { "ref": "pkg:npm/cli@0.6.6", "dependsOn": [ "pkg:npm/exit@0.1.2", "pkg:npm/glob@3.2.11" ] }, { "ref": "pkg:npm/date-now@0.1.4", "dependsOn": [] }, { "ref": "pkg:npm/console-browserify@1.1.0", "dependsOn": [ "pkg:npm/date-now@0.1.4" ] }, { "ref": "pkg:npm/domelementtype@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/domhandler@2.3.0", "dependsOn": [ "pkg:npm/domelementtype@1.2.0" ] }, { "ref": "pkg:npm/domelementtype@1.1.3", "dependsOn": [] }, { "ref": "pkg:npm/entities@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/dom-serializer@0.1.0", "dependsOn": [ "pkg:npm/domelementtype@1.1.3", "pkg:npm/entities@1.1.1" ] }, { "ref": "pkg:npm/domutils@1.5.1", "dependsOn": [ "pkg:npm/dom-serializer@0.1.0", "pkg:npm/domelementtype@1.2.0" ] }, { "ref": "pkg:npm/entities@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@0.10.31", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.1.14", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.1", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/htmlparser2@3.8.3", "dependsOn": [ "pkg:npm/domelementtype@1.2.0", "pkg:npm/domhandler@2.3.0", "pkg:npm/domutils@1.5.1", "pkg:npm/entities@1.0.0", "pkg:npm/readable-stream@1.1.14" ] }, { "ref": "pkg:npm/minimatch@1.0.0", "dependsOn": [ "pkg:npm/lru-cache@2.7.3", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/shelljs@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/strip-json-comments@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/underscore@1.6.0", "dependsOn": [] }, { "ref": "pkg:npm/jshint@2.6.3", "dependsOn": [ "pkg:npm/cli@0.6.6", "pkg:npm/console-browserify@1.1.0", "pkg:npm/exit@0.1.2", "pkg:npm/htmlparser2@3.8.3", "pkg:npm/minimatch@1.0.0", "pkg:npm/shelljs@0.3.0", "pkg:npm/strip-json-comments@1.0.4", "pkg:npm/underscore@1.6.0" ] }, { "ref": "pkg:npm/broccoli-middleware@0.18.1", "dependsOn": [ "pkg:npm/handlebars@4.0.5", "pkg:npm/jshint@2.6.3", "pkg:npm/mime@1.3.4" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/broccoli-middleware@0.18.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-11T19:30:50Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'broccoli-middleware' with version '0.18.1'." } ] }