{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:1b9dafac-fad4-4b04-9fa8-6cbb1a63ce9a", "version": 1, "metadata": { "timestamp": "2026-09-28T22:25:37Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "teams", "group": "@chat-adapter", "version": "4.41.1", "description": "Microsoft Teams adapter for Chat SDK — Bot Framework webhooks, Adaptive Cards, and Graph API", "purl": "pkg:npm/%40chat-adapter/teams@4.41.1", "bom-ref": "pkg:npm/@chat-adapter/teams@4.41.1", "properties": [ { "name": "cdx:npm:scripts", "value": "build, dev, test, test:watch, typecheck, clean" }, { "name": "cdx:npm:buildScripts", "value": "build, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://chat-sdk.dev/adapters/official/teams" }, { "type": "vcs", "url": "git+https://github.com/vercel/chat.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@chat-adapter\\n@microsoft\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@chat-adapter/shared/package.json\\nnode_modules/@chat-adapter/tests/package.json\\nnode_modules/@microsoft/teams.api/package.json\\nnode_modules/@microsoft/teams.apps/package.json\\nnode_modules/@microsoft/teams.cards/package.json\\nnode_modules/@microsoft/teams.graph-endpoints/package.json\\nnode_modules/@microsoft/teams.graph/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/chat/package.json\\nnode_modules/tsup/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.0.18", "description": "Next generation testing framework powered by Vite", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.0.18", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.0.18", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "ImportedModules", "value": "vitest,vitest/vi" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ], "occurrences": [ { "location": "src/test-utils.ts", "line": 2 }, { "location": "src/test-utils.ts", "line": 23 }, { "location": "src/test-utils.ts", "line": 30 }, { "location": "src/test-utils.ts", "line": 38 }, { "location": "src/test-utils.ts", "line": 49 }, { "location": "src/test-utils.ts", "line": 59 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "EGOIST" } ], "group": "", "name": "tsup", "version": "8.5.1", "description": "Bundle your TypeScript library with no config, powered by esbuild", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsup@8.5.1", "externalReferences": [ { "type": "website", "url": "https://tsup.egoist.dev/" }, { "type": "vcs", "url": "https://github.com/egoist/tsup.git" } ], "type": "library", "bom-ref": "pkg:npm/tsup@8.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsup/package.json" } ], "concludedValue": "node_modules/tsup/package.json" } ] } }, { "group": "", "name": "chat", "version": "4.41.1", "description": "Chat SDK — universal TypeScript toolkit for building multi-platform chat bots and AI agents on Slack, Teams, Google Chat, Discord, WhatsApp, and more", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chat@4.41.1", "externalReferences": [ { "type": "website", "url": "https://chat-sdk.dev/docs" }, { "type": "vcs", "url": "git+https://github.com/vercel/chat.git" } ], "type": "library", "bom-ref": "pkg:npm/chat@4.41.1", "properties": [ { "name": "SrcFile", "value": "node_modules/chat/package.json" }, { "name": "ImportedModules", "value": "chat,ConsoleLogger,chat/ConsoleLogger,convertEmojiPlaceholders,chat/convertEmojiPlaceholders,defaultEmojiResolver,chat/defaultEmojiResolver,Message,chat/Message,cardChildToFallbackText,chat/cardChildToFallbackText,NotImplementedError,chat/NotImplementedError,BaseFormatConverter,chat/BaseFormatConverter,getNodeChildren,chat/getNodeChildren,isBlockquoteNode,chat/isBlockquoteNode,isCodeNode,chat/isCodeNode,isDeleteNode,chat/isDeleteNode,isEmphasisNode,chat/isEmphasisNode,isInlineCodeNode,chat/isInlineCodeNode,isLinkNode,chat/isLinkNode,isListNode,chat/isListNode,isParagraphNode,chat/isParagraphNode,isStrongNode,chat/isStrongNode,isTableNode,chat/isTableNode,isTextNode,chat/isTextNode,parseMarkdown,chat/parseMarkdown,Attachment,chat/Attachment,Logger,chat/Logger,WebhookOptions,chat/WebhookOptions,ActionsElement,chat/ActionsElement,ButtonElement,chat/ButtonElement,CardChild,chat/CardChild,CardElement,chat/CardElement,DividerElement,chat/DividerElement,FieldsElement,chat/FieldsElement,ImageElement,chat/ImageElement,LinkButtonElement,chat/LinkButtonElement,RadioSelectElement,chat/RadioSelectElement,SectionElement,chat/SectionElement,SelectElement,chat/SelectElement,TableAlignment,chat/TableAlignment,TableElement,chat/TableElement,TableVerticalAlignment,chat/TableVerticalAlignment,TextElement,chat/TextElement,ChannelInfo,chat/ChannelInfo,FetchOptions,chat/FetchOptions,FetchResult,chat/FetchResult,ListThreadsOptions,chat/ListThreadsOptions,ListThreadsResult,chat/ListThreadsResult,ThreadInfo,chat/ThreadInfo,ThreadSummary,chat/ThreadSummary,ActionEvent,chat/ActionEvent,Adapter,chat/Adapter,AdapterPostableMessage,chat/AdapterPostableMessage,ChatInstance,chat/ChatInstance,EmojiValue,chat/EmojiValue,EphemeralMessage,chat/EphemeralMessage,FileUpload,chat/FileUpload,FormattedContent,chat/FormattedContent,ModalElement,chat/ModalElement,RawMessage,chat/RawMessage,ReactionEvent,chat/ReactionEvent,StreamChunk,chat/StreamChunk,StreamOptions,chat/StreamOptions,UserInfo,chat/UserInfo,InstallationAction,chat/InstallationAction,Content,chat/Content,MdastTable,chat/MdastTable,Root,chat/Root,DateInputElement,chat/DateInputElement,ModalChild,chat/ModalChild,ModalResponse,chat/ModalResponse,NumberInputElement,chat/NumberInputElement,TextInputElement,chat/TextInputElement" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chat/package.json" } ], "concludedValue": "node_modules/chat/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 18 }, { "location": "dist/index.js", "line": 306 }, { "location": "dist/index.js", "line": 375 }, { "location": "dist/index.js", "line": 671 }, { "location": "dist/index.js", "line": 1409 }, { "location": "dist/index.js", "line": 1422 }, { "location": "dist/index.js", "line": 1474 }, { "location": "dist/index.js", "line": 1477 }, { "location": "dist/index.js", "line": 1478 }, { "location": "dist/index.js", "line": 1480 }, { "location": "dist/index.js", "line": 1483 }, { "location": "dist/index.js", "line": 1484 }, { "location": "dist/index.js", "line": 1487 }, { "location": "dist/index.js", "line": 1488 }, { "location": "dist/index.js", "line": 1491 }, { "location": "dist/index.js", "line": 1492 }, { "location": "dist/index.js", "line": 1495 }, { "location": "dist/index.js", "line": 1498 }, { "location": "dist/index.js", "line": 1503 }, { "location": "dist/index.js", "line": 1504 }, { "location": "dist/index.js", "line": 1507 }, { "location": "dist/index.js", "line": 1508 }, { "location": "dist/index.js", "line": 1510 }, { "location": "dist/index.js", "line": 1519 }, { "location": "dist/index.js", "line": 1533 }, { "location": "dist/index.js", "line": 2453 }, { "location": "dist/index.js", "line": 2476 }, { "location": "dist/index.js", "line": 2724 }, { "location": "dist/index.js", "line": 2800 }, { "location": "dist/index.js", "line": 2942 }, { "location": "dist/index.js", "line": 3240 }, { "location": "src/attachments.ts", "line": 2 }, { "location": "src/bridge-adapter.ts", "line": 15 }, { "location": "src/cards.ts", "line": 56 }, { "location": "src/cards.ts", "line": 57 }, { "location": "src/cards.ts", "line": 161 }, { "location": "src/graph-api.ts", "line": 14 }, { "location": "src/graph-api.ts", "line": 15 }, { "location": "src/index.ts", "line": 51 }, { "location": "src/index.ts", "line": 57 }, { "location": "src/index.ts", "line": 960 }, { "location": "src/index.ts", "line": 987 }, { "location": "src/index.ts", "line": 1314 }, { "location": "src/index.ts", "line": 1409 }, { "location": "src/index.ts", "line": 1605 }, { "location": "src/index.ts", "line": 2017 }, { "location": "src/installation.ts", "line": 1 }, { "location": "src/markdown.ts", "line": 34 }, { "location": "src/markdown.ts", "line": 48 }, { "location": "src/markdown.ts", "line": 123 }, { "location": "src/markdown.ts", "line": 128 }, { "location": "src/markdown.ts", "line": 129 }, { "location": "src/markdown.ts", "line": 134 }, { "location": "src/markdown.ts", "line": 138 }, { "location": "src/markdown.ts", "line": 140 }, { "location": "src/markdown.ts", "line": 146 }, { "location": "src/markdown.ts", "line": 148 }, { "location": "src/markdown.ts", "line": 154 }, { "location": "src/markdown.ts", "line": 156 }, { "location": "src/markdown.ts", "line": 162 }, { "location": "src/markdown.ts", "line": 166 }, { "location": "src/markdown.ts", "line": 170 }, { "location": "src/markdown.ts", "line": 171 }, { "location": "src/markdown.ts", "line": 178 }, { "location": "src/markdown.ts", "line": 179 }, { "location": "src/markdown.ts", "line": 184 }, { "location": "src/markdown.ts", "line": 196 }, { "location": "src/markdown.ts", "line": 212 }, { "location": "src/modals.ts", "line": 40 }, { "location": "src/test-utils.ts", "line": 1 }, { "location": "src/types.ts", "line": 1 } ] }, "tags": [ "ai" ] }, { "group": "@types", "name": "node", "version": "25.3.2", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@25.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@25.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@microsoft", "name": "teams.graph-endpoints", "version": "2.0.14", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/teams.graph-endpoints@2.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/teams.ts" }, { "type": "vcs", "url": "https://github.com/microsoft/teams.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/teams.graph-endpoints@2.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/teams.graph-endpoints/package.json" }, { "name": "ImportedModules", "value": "@microsoft/teams.graph-endpoints,users,@microsoft/teams.graph-endpoints/users,chats,@microsoft/teams.graph-endpoints/chats,teams,@microsoft/teams.graph-endpoints/teams" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/teams.graph-endpoints/package.json" } ], "concludedValue": "node_modules/@microsoft/teams.graph-endpoints/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 12 }, { "location": "dist/index.js", "line": 670 }, { "location": "src/graph-api.ts", "line": 3 }, { "location": "src/index.ts", "line": 26 } ] } }, { "group": "@microsoft", "name": "teams.graph", "version": "2.0.14", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/teams.graph@2.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/teams.ts" }, { "type": "vcs", "url": "https://github.com/microsoft/teams.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/teams.graph@2.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/teams.graph/package.json" }, { "name": "ImportedModules", "value": "@microsoft/teams.graph,Client,@microsoft/teams.graph/Client" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/teams.graph/package.json" } ], "concludedValue": "node_modules/@microsoft/teams.graph/package.json" } ], "occurrences": [ { "location": "src/graph-api.ts", "line": 2 } ] } }, { "group": "@microsoft", "name": "teams.cards", "version": "2.0.14", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/teams.cards@2.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/teams.ts" }, { "type": "vcs", "url": "https://github.com/microsoft/teams.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/teams.cards@2.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/teams.cards/package.json" }, { "name": "ImportedModules", "value": "@microsoft/teams.cards,AdaptiveCard,@microsoft/teams.cards/AdaptiveCard,Image,@microsoft/teams.cards/Image,Choice,@microsoft/teams.cards/Choice,ChoiceSetInput,@microsoft/teams.cards/ChoiceSetInput,ColumnDefinition,@microsoft/teams.cards/ColumnDefinition,Container,@microsoft/teams.cards/Container,Fact,@microsoft/teams.cards/Fact,FactSet,@microsoft/teams.cards/FactSet,OpenUrlAction,@microsoft/teams.cards/OpenUrlAction,SubmitAction,@microsoft/teams.cards/SubmitAction,Table,@microsoft/teams.cards/Table,TableCell,@microsoft/teams.cards/TableCell,TableRow,@microsoft/teams.cards/TableRow,TextBlock,@microsoft/teams.cards/TextBlock,DateInput,@microsoft/teams.cards/DateInput,NumberInput,@microsoft/teams.cards/NumberInput,TextInput,@microsoft/teams.cards/TextInput,ActionArray,@microsoft/teams.cards/ActionArray,ActionStyle,@microsoft/teams.cards/ActionStyle,CardElementArray,@microsoft/teams.cards/CardElementArray,ChoiceSetInputOptions,@microsoft/teams.cards/ChoiceSetInputOptions,HorizontalAlignment,@microsoft/teams.cards/HorizontalAlignment,OpenUrlActionOptions,@microsoft/teams.cards/OpenUrlActionOptions,SubmitActionOptions,@microsoft/teams.cards/SubmitActionOptions,TextBlockOptions,@microsoft/teams.cards/TextBlockOptions,VerticalAlignment,@microsoft/teams.cards/VerticalAlignment,DateInputOptions,@microsoft/teams.cards/DateInputOptions,NumberInputOptions,@microsoft/teams.cards/NumberInputOptions,TextInputOptions,@microsoft/teams.cards/TextInputOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/teams.cards/package.json" } ], "concludedValue": "node_modules/@microsoft/teams.cards/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 305 }, { "location": "dist/index.js", "line": 1565 }, { "location": "src/cards.ts", "line": 23 }, { "location": "src/cards.ts", "line": 39 }, { "location": "src/modals.ts", "line": 16 }, { "location": "src/modals.ts", "line": 28 } ] } }, { "group": "@microsoft", "name": "teams.apps", "version": "2.0.14", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/teams.apps@2.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/teams.ts" }, { "type": "vcs", "url": "https://github.com/microsoft/teams.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/teams.apps@2.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/teams.apps/package.json" }, { "name": "ImportedModules", "value": "@microsoft/teams.apps,StreamCancelledError,@microsoft/teams.apps/StreamCancelledError,@microsoft/teams.apps/App,HttpMethod,@microsoft/teams.apps/HttpMethod,HttpRouteHandler,@microsoft/teams.apps/HttpRouteHandler,IHttpServerAdapter,@microsoft/teams.apps/IHttpServerAdapter,IActivityContext,@microsoft/teams.apps/IActivityContext,IStreamer,@microsoft/teams.apps/IStreamer" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/teams.apps/package.json" } ], "concludedValue": "node_modules/@microsoft/teams.apps/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 11 }, { "location": "dist/index.js", "line": 25 }, { "location": "src/app.ts", "line": 10 }, { "location": "src/bridge-adapter.ts", "line": 14 }, { "location": "src/graph-api.ts", "line": 1 }, { "location": "src/index.ts", "line": 24 }, { "location": "src/index.ts", "line": 25 } ] } }, { "group": "@microsoft", "name": "teams.api", "version": "2.0.14", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/teams.api@2.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/teams.ts" }, { "type": "vcs", "url": "https://github.com/microsoft/teams.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/teams.api@2.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/teams.api/package.json" }, { "name": "ImportedModules", "value": "@microsoft/teams.api,MessageActivity,@microsoft/teams.api/MessageActivity,TypingActivity,@microsoft/teams.api/TypingActivity,Client,@microsoft/teams.api/Client,toActivityParams,@microsoft/teams.api/toActivityParams,ActivityLike,@microsoft/teams.api/ActivityLike,ConversationReference,@microsoft/teams.api/ConversationReference,SentActivity,@microsoft/teams.api/SentActivity,Account,@microsoft/teams.api/Account,Activity,@microsoft/teams.api/Activity,IAdaptiveCardActionInvokeActivity,@microsoft/teams.api/IAdaptiveCardActionInvokeActivity,IConversationUpdateActivity,@microsoft/teams.api/IConversationUpdateActivity,IMessageActivity,@microsoft/teams.api/IMessageActivity,IMessageReactionActivity,@microsoft/teams.api/IMessageReactionActivity,InstallUpdateActivity,@microsoft/teams.api/InstallUpdateActivity,ITaskFetchInvokeActivity,@microsoft/teams.api/ITaskFetchInvokeActivity,ITaskSubmitInvokeActivity,@microsoft/teams.api/ITaskSubmitInvokeActivity,MessageReactionType,@microsoft/teams.api/MessageReactionType,TaskModuleResponse,@microsoft/teams.api/TaskModuleResponse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/teams.api/package.json" } ], "concludedValue": "node_modules/@microsoft/teams.api/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 10 }, { "location": "dist/index.js", "line": 24 }, { "location": "dist/index.js", "line": 69 }, { "location": "src/app.ts", "line": 5 }, { "location": "src/app.ts", "line": 9 }, { "location": "src/app.ts", "line": 81 }, { "location": "src/index.ts", "line": 22 }, { "location": "src/index.ts", "line": 23 }, { "location": "src/modals.ts", "line": 8 }, { "location": "src/thread-id.ts", "line": 2 } ] } }, { "group": "@chat-adapter", "name": "tests", "version": "4.41.1", "description": "Vitest factories, matchers, and setup utilities for testing Chat SDK adapters and bots", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40chat-adapter/tests@4.41.1", "externalReferences": [ { "type": "website", "url": "https://chat-sdk.dev/docs/testing" }, { "type": "vcs", "url": "git+https://github.com/vercel/chat.git" } ], "type": "library", "bom-ref": "pkg:npm/@chat-adapter/tests@4.41.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@chat-adapter/tests/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chat-adapter/tests/package.json" } ], "concludedValue": "node_modules/@chat-adapter/tests/package.json" } ] } }, { "group": "@chat-adapter", "name": "shared", "version": "4.41.1", "description": "Shared utilities for Chat SDK platform adapters", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40chat-adapter/shared@4.41.1", "externalReferences": [ { "type": "website", "url": "https://chat-sdk.dev/docs/contributing/building" }, { "type": "vcs", "url": "git+https://github.com/vercel/chat.git" } ], "type": "library", "bom-ref": "pkg:npm/@chat-adapter/shared@4.41.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@chat-adapter/shared/package.json" }, { "name": "ImportedModules", "value": "@chat-adapter/shared,bufferToDataUri,@chat-adapter/shared/bufferToDataUri,extractCard,@chat-adapter/shared/extractCard,extractFiles,@chat-adapter/shared/extractFiles,NetworkError,@chat-adapter/shared/NetworkError,toBuffer,@chat-adapter/shared/toBuffer,ValidationError,@chat-adapter/shared/ValidationError,downloadAttachment,@chat-adapter/shared/downloadAttachment,createEmojiConverter,@chat-adapter/shared/createEmojiConverter,mapButtonStyle,@chat-adapter/shared/mapButtonStyle,cardToFallbackText,@chat-adapter/shared/cardToFallbackText,AdapterRateLimitError,@chat-adapter/shared/AdapterRateLimitError,AuthenticationError,@chat-adapter/shared/AuthenticationError,PermissionError,@chat-adapter/shared/PermissionError,escapeTableCell,@chat-adapter/shared/escapeTableCell" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chat-adapter/shared/package.json" } ], "concludedValue": "node_modules/@chat-adapter/shared/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 9 }, { "location": "dist/index.js", "line": 74 }, { "location": "dist/index.js", "line": 133 }, { "location": "dist/index.js", "line": 289 }, { "location": "dist/index.js", "line": 307 }, { "location": "dist/index.js", "line": 473 }, { "location": "dist/index.js", "line": 586 }, { "location": "dist/index.js", "line": 628 }, { "location": "dist/index.js", "line": 674 }, { "location": "dist/index.js", "line": 1393 }, { "location": "dist/index.js", "line": 1553 }, { "location": "dist/index.js", "line": 1566 }, { "location": "dist/index.js", "line": 1582 }, { "location": "dist/index.js", "line": 2695 }, { "location": "dist/index.js", "line": 2697 }, { "location": "dist/index.js", "line": 2764 }, { "location": "dist/index.js", "line": 2766 }, { "location": "dist/index.js", "line": 2893 }, { "location": "dist/index.js", "line": 2901 }, { "location": "dist/index.js", "line": 2913 }, { "location": "dist/index.js", "line": 3213 }, { "location": "dist/index.js", "line": 3215 }, { "location": "src/attachments.ts", "line": 1 }, { "location": "src/attachments.ts", "line": 115 }, { "location": "src/cards.ts", "line": 12 }, { "location": "src/cards.ts", "line": 62 }, { "location": "src/cards.ts", "line": 286 }, { "location": "src/cards.ts", "line": 451 }, { "location": "src/errors.ts", "line": 6 }, { "location": "src/index.ts", "line": 8 }, { "location": "src/index.ts", "line": 1277 }, { "location": "src/index.ts", "line": 1281 }, { "location": "src/index.ts", "line": 1366 }, { "location": "src/index.ts", "line": 1370 }, { "location": "src/index.ts", "line": 1537 }, { "location": "src/index.ts", "line": 1546 }, { "location": "src/index.ts", "line": 1566 }, { "location": "src/index.ts", "line": 1985 }, { "location": "src/index.ts", "line": 1989 }, { "location": "src/markdown.ts", "line": 14 }, { "location": "src/modals.ts", "line": 7 }, { "location": "src/modals.ts", "line": 42 }, { "location": "src/modals.ts", "line": 84 }, { "location": "src/thread-id.ts", "line": 1 } ] }, "tags": [ "network" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@chat-adapter/teams@4.41.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-28T22:25:37Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'teams' with version '4.41.1'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 12 source files." } ] }