{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:b9eb1adf-5962-4dce-9e7d-b5ef23d3a908",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-29T08:45:48Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "cartocolor",
      "group": "",
      "version": "5.0.2",
      "description": "CartoColors: custom color palettes from CARTO",
      "purl": "pkg:npm/cartocolor@5.0.2",
      "bom-ref": "pkg:npm/cartocolor@5.0.2",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, build:esm, build:cjs, test, preversion, version, postversion"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "url": "https://opensource.org/licenses/CC-BY-4.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://carto.com/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/cartodb/cartocolor"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@esbuild"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "yarn.lock"
      }
    ]
  },
  "components": [
    {
      "group": "@esbuild",
      "name": "aix-ppc64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdcee1a1cc74a66d786c7425a9454a9b1c1d4ff7b9fca932a18d56f05f6593ff02904d37ed24c30f3f0f5d43ff2c4e9f6a3d87a9c86f0ecf4671287116123bf1"
        }
      ],
      "purl": "pkg:npm/%40esbuild/aix-ppc64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/aix-ppc64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48664a9e0a1359552b88ee5b0e32385831ac371d95299a1771db3e8ad6bf915601fbc22448228344368afb9caed1be52d1eaba0774bb7e9884be9b1ad9a9a695"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b5bdeddbe057b225ec828c1e0c5f50a25b24da209c13f7001813ef3e211039dd8a0dfeb782fc17f61834570330d39e1ebd16997ed6e20a83be83881dd4eafc1"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d70cf33688f642d364018c0871627ae944d103cd3e45343f92e3ccb44b8fd17e9da7902bdb70e7e7aeaadda57ad61e0462bae01a53a097f1dd72a37fd92ff6be"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-arm64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6723243d673979344e70b380d74944a9d0d24dce9db3a9ee8770de1e02a2a7f5c9ad88d90df9e40954adcbcb2f59dcbe482d5fefb50bb55788ab2993cda07afd"
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-arm64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-arm64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b865d56ad733fdbf9d61fdc2959daee29bb1b4cc64ca281e9b3f6c898929878e33b291b77c0dd86b4a2f15f7bf2c17af6b930ae7f330b22f6b7a2377a2ea3f4"
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-arm64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e246ce19da40eb5097a9a743f866ff3f0dd85da9901a2cfd99a97f87ddeb1554a3af972032798977f81b7cf466fb704c89fbe768e7d2d603566880f1904d80dc"
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-arm64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a14be474f67b87cc305f3de3149622995f6ed6ae6afc505a7ddda15ffd2f29fbefb1e4167e0f7e3808b297c6663aab38132f79882d22263c23493b30faf9146"
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ddbbc04bf8098ef9e083bef4fa933fdf3d086fb872fc60ae04c4a65f00d5ac35ed64146387c3b549bd2fc52922c5aa1797981deb4c5df11502205163d8b069c"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e71978ce02ffbb70cdcb611c78b49b18760cbc7460c6900cc5d3aa080c6a6959b52450a37d4a681003c1f42ae9295343e3ae3f579a06d6a8c5525ff53b79e4c"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ia32",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bbdc13825b657d95c8fb46d10c8be8017c70ba9f7f951e9c105cfe687dfb5030f2c39295689589f56065f1399f61a7887750f44ab9eccbed6901b30fb7101dd"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ia32@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ia32@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-loong64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f387981f0c161eade6c8863fea29002cc727c247fa428ecd22afbec47d31f9c26e50da5dc21f2696952d458f8988651ceb4caeec495605b5471964c00537251b"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-loong64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-loong64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-mips64el",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6c892667813d3f64a1be007fbf6a0c0a176f4b742c70e0e0e2fcf884d05e76076aed2e8ce50cff76ba67fc1b618fa1557ad752cde2967e9d24dc91e6ceb1c50"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-mips64el@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-mips64el@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ppc64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb44f8695d8203e89cd3850bc9ad40ffc336443a4348ad9c9204e3ea3cc728526f0aad23420f1a7d04089f810cd06f2eda77b23a234781217d60a3dfbaa28e57"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ppc64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ppc64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-riscv64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c79b2c09d5e6642f3a2f62e2d6a40f17f55a0b854fdb4bbf666f23940bbd22254e562efd62c4b3e9ca4f0d8665d6b7ca487602256f5705f142a3ae92e6054f48"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-riscv64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-riscv64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-s390x",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34fedf4e9192156757cafa7c880154d38b8587d011a2994554cfe6fbc9534696981bedb2b473d95b2b1c4ac30ce9cbce6d220ad8aa0f1d78990f897df566b16d"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-s390x@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-s390x@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82267fb8ec560ca75ae3866ec9f29bca4797ce77ee54d91381739438f2488db6b2255e85469438cf1532f493013cb68af4825c756b5aa1e42b601321dd1af8bd"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21e14c7c615241f223d5de1753eea591b173311fa61442d451562b67e8ef5b31b8346becea8e7745e1072c7a5892345b7448c9cb65b79537a44f1ac51d6ed826"
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3c421583e96c5c79b34d684e050b082f41552703272e4ddf8176f03fa19bbefcc99ba54f2963674c118958ce3e6e3475881b98ef7439855eed2769078e594a0"
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "sunos-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f74af79d304b81d2200f8142555f7e711e87ab60f3b37d7d89c56c967f8d4e64d5c1f7d6702a971a697cac0a28707b89f399192b7e830ad7a28bde9b6bf3d7f2"
        }
      ],
      "purl": "pkg:npm/%40esbuild/sunos-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/sunos-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-arm64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0d9dd96c053f0e784fcc643486a510c9956ba18ee533fdd9fcd271f410fe19cc3518bcc0d56bb1bcec3569c1e06b9f8c5d258c974bfcb809036b7fb4763835e"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-arm64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-arm64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-ia32",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e2d900a118d1735a150d355b94e30db562461312bb0d87787e0b3be5121ce045bc2c27b4eb590a91cd6ddb9652ca2af4e9a6e1770c9dd73f5184835d407eb11"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-ia32@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-ia32@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-x64",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5447d309989ca199d9eac1a48c53c6445149b8bd9f667d9b2e1b1e919975089b257e5a767094bf5682acd63324fb7a437ec196e827d05547243fbd3b1f06d779"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-x64@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-x64@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colorbrewer",
      "version": "1.5.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ce360da9197c880fcccd80a1c195a816f2c6ff00c4a11b38f8ad125fcf96e267b8ae1d0658aae4822c4fc2a35a124059adfefbf08f27b32427a3425ec51bfb6"
        }
      ],
      "purl": "pkg:npm/colorbrewer@1.5.6",
      "type": "library",
      "bom-ref": "pkg:npm/colorbrewer@1.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "colorbrewer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cartocolor.js#936"
          },
          {
            "location": "src/colorbrewer.js#1"
          },
          {
            "location": "dist/cartocolor.cjs#1039"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e61cf01ae61e2d4b1cfe83f0fc20763ac028ed222171f08eff43402af8d9afb6862fc8c9c953429025ca81e901f7d17f71fd6e027a6814b4f8100d915c6b948"
        }
      ],
      "purl": "pkg:npm/esbuild@0.21.2",
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@esbuild/aix-ppc64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-arm64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-arm64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ia32@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-loong64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-mips64el@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ppc64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-riscv64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-s390x@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/sunos-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-arm64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-ia32@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-x64@0.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colorbrewer@1.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild@0.21.2",
      "dependsOn": [
        "pkg:npm/@esbuild/aix-ppc64@0.21.2",
        "pkg:npm/@esbuild/android-arm64@0.21.2",
        "pkg:npm/@esbuild/android-arm@0.21.2",
        "pkg:npm/@esbuild/android-x64@0.21.2",
        "pkg:npm/@esbuild/darwin-arm64@0.21.2",
        "pkg:npm/@esbuild/darwin-x64@0.21.2",
        "pkg:npm/@esbuild/freebsd-arm64@0.21.2",
        "pkg:npm/@esbuild/freebsd-x64@0.21.2",
        "pkg:npm/@esbuild/linux-arm64@0.21.2",
        "pkg:npm/@esbuild/linux-arm@0.21.2",
        "pkg:npm/@esbuild/linux-ia32@0.21.2",
        "pkg:npm/@esbuild/linux-loong64@0.21.2",
        "pkg:npm/@esbuild/linux-mips64el@0.21.2",
        "pkg:npm/@esbuild/linux-ppc64@0.21.2",
        "pkg:npm/@esbuild/linux-riscv64@0.21.2",
        "pkg:npm/@esbuild/linux-s390x@0.21.2",
        "pkg:npm/@esbuild/linux-x64@0.21.2",
        "pkg:npm/@esbuild/netbsd-x64@0.21.2",
        "pkg:npm/@esbuild/openbsd-x64@0.21.2",
        "pkg:npm/@esbuild/sunos-x64@0.21.2",
        "pkg:npm/@esbuild/win32-arm64@0.21.2",
        "pkg:npm/@esbuild/win32-ia32@0.21.2",
        "pkg:npm/@esbuild/win32-x64@0.21.2"
      ]
    },
    {
      "ref": "pkg:npm/cartocolor@5.0.2",
      "dependsOn": [
        "pkg:npm/@esbuild/aix-ppc64@0.21.2",
        "pkg:npm/@esbuild/android-arm64@0.21.2",
        "pkg:npm/@esbuild/android-arm@0.21.2",
        "pkg:npm/@esbuild/android-x64@0.21.2",
        "pkg:npm/@esbuild/darwin-arm64@0.21.2",
        "pkg:npm/@esbuild/darwin-x64@0.21.2",
        "pkg:npm/@esbuild/freebsd-arm64@0.21.2",
        "pkg:npm/@esbuild/freebsd-x64@0.21.2",
        "pkg:npm/@esbuild/linux-arm64@0.21.2",
        "pkg:npm/@esbuild/linux-arm@0.21.2",
        "pkg:npm/@esbuild/linux-ia32@0.21.2",
        "pkg:npm/@esbuild/linux-loong64@0.21.2",
        "pkg:npm/@esbuild/linux-mips64el@0.21.2",
        "pkg:npm/@esbuild/linux-ppc64@0.21.2",
        "pkg:npm/@esbuild/linux-riscv64@0.21.2",
        "pkg:npm/@esbuild/linux-s390x@0.21.2",
        "pkg:npm/@esbuild/linux-x64@0.21.2",
        "pkg:npm/@esbuild/netbsd-x64@0.21.2",
        "pkg:npm/@esbuild/openbsd-x64@0.21.2",
        "pkg:npm/@esbuild/sunos-x64@0.21.2",
        "pkg:npm/@esbuild/win32-arm64@0.21.2",
        "pkg:npm/@esbuild/win32-ia32@0.21.2",
        "pkg:npm/@esbuild/win32-x64@0.21.2",
        "pkg:npm/colorbrewer@1.5.6",
        "pkg:npm/esbuild@0.21.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/cartocolor@5.0.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-29T08:45:48Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'cartocolor' with version '5.0.2'. The package type in this SBOM is npm with a single purl namespace '@esbuild' described under components. The components were identified from the source files: yarn.lock."
    }
  ]
}