{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:9138fa81-4efa-44c3-b97e-d52f24e5473c", "version": 1, "metadata": { "timestamp": "2026-10-02T08:46:12Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "express-winston", "group": "", "version": "3.4.0", "description": "express.js middleware for flatiron/winston", "purl": "pkg:npm/express-winston@3.4.0", "bom-ref": "pkg:npm/express-winston@3.4.0", "author": "bithavoc (http://bithavoc.io)", "properties": [ { "name": "cdx:npm:scripts", "value": "pretest, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/bithavoc/express-winston.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@my-scope" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/helper-function-name/package.json\\nnode_modules/@babel/helper-get-function-arity/package.json\\nnode_modules/@babel/helper-split-export-declaration/package.json\\nnode_modules/@babel/highlight/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/template/package.json\\nnode_modules/@babel/traverse/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/accepts/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-escapes/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/append-transform/package.json\\nnode_modules/archy/package.json\\nnode_modules/argparse/package.json\\nnode_modules/astral-regex/package.json\\nnode_modules/async/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/caching-transform/package.json\\nnode_modules/callsites/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chardet/package.json\\nnode_modules/cli-cursor/package.json\\nnode_modules/cli-width/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/color-string/package.json\\nnode_modules/color/package.json\\nnode_modules/colornames/package.json\\nnode_modules/colors/package.json\\nnode_modules/colorspace/package.json\\nnode_modules/commander/package.json\\nnode_modules/commondir/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cp-file/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/default-require-extensions/package.json\\nnode_modules/depd/package.json\\nnode_modules/diagnostics/package.json\\nnode_modules/diff/package.json\\nnode_modules/doctrine/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/enabled/package.json\\nnode_modules/env-variable/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es6-error/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-utils/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/external-editor/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/fast-safe-stringify/package.json\\nnode_modules/fecha/package.json\\nnode_modules/figures/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/find-cache-dir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/flatted/package.json\\nnode_modules/foreground-child/node_modules/cross-spawn/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/fresh/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/functional-red-black-tree/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/growl/package.json\\nnode_modules/handlebars/node_modules/source-map/package.json\\nnode_modules/handlebars/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/hasha/package.json\\nnode_modules/he/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ignore/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inquirer/node_modules/ansi-regex/package.json\\nnode_modules/inquirer/node_modules/strip-ansi/package.json\\nnode_modules/inquirer/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-promise/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-hook/package.json\\nnode_modules/istanbul-lib-instrument/node_modules/semver/package.json\\nnode_modules/istanbul-lib-instrument/package.json\\nnode_modules/istanbul-lib-report/node_modules/supports-color/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-lib-source-maps/node_modules/source-map/package.json\\nnode_modules/istanbul-lib-source-maps/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json-parse-better-errors/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/kuler/package.json\\nnode_modules/levn/package.json\\nnode_modules/load-json-file/node_modules/pify/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.flattendeep/package.json\\nnode_modules/lodash/package.json\\nnode_modules/logform/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/media-typer/package.json\\nnode_modules/merge-descriptors/package.json\\nnode_modules/merge-source-map/node_modules/source-map/package.json\\nnode_modules/merge-source-map/package.json\\nnode_modules/methods/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/mimic-fn/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/debug/package.json\\nnode_modules/mocha/node_modules/glob/package.json\\nnode_modules/mocha/node_modules/ms/package.json\\nnode_modules/mocha/node_modules/supports-color/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/mute-stream/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/neo-async/package.json\\nnode_modules/nested-error-stacks/package.json\\nnode_modules/nice-try/package.json\\nnode_modules/node-mocks-http/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/nyc/package.json\\nnode_modules/once/package.json\\nnode_modules/one-time/package.json\\nnode_modules/onetime/package.json\\nnode_modules/optimist/package.json\\nnode_modules/optionator/node_modules/wordwrap/package.json\\nnode_modules/optionator/package.json\\nnode_modules/os-homedir/package.json\\nnode_modules/os-tmpdir/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-try/package.json\\nnode_modules/package-hash/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/parseurl/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-is-inside/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-type/node_modules/pify/package.json\\nnode_modules/path-type/package.json\\nnode_modules/pify/package.json\\nnode_modules/pkg-dir/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/progress/package.json\\nnode_modules/pseudomap/package.json\\nnode_modules/punycode/package.json\\nnode_modules/range-parser/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/regexpp/package.json\\nnode_modules/release-zalgo/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/require-main-filename/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/restore-cursor/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/run-async/package.json\\nnode_modules/rxjs/ajax/package.json\\nnode_modules/rxjs/internal-compatibility/package.json\\nnode_modules/rxjs/operators/package.json\\nnode_modules/rxjs/package.json\\nnode_modules/rxjs/src/ajax/package.json\\nnode_modules/rxjs/src/fetch/package.json\\nnode_modules/rxjs/src/internal-compatibility/package.json\\nnode_modules/rxjs/src/operators/package.json\\nnode_modules/rxjs/src/testing/package.json\\nnode_modules/rxjs/src/webSocket/package.json\\nnode_modules/rxjs/testing/package.json\\nnode_modules/rxjs/webSocket/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/set-blocking/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/should-equal/package.json\\nnode_modules/should-format/package.json\\nnode_modules/should-type-adaptors/package.json\\nnode_modules/should-type/package.json\\nnode_modules/should-util/package.json\\nnode_modules/should/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/simple-swizzle/node_modules/is-arrayish/package.json\\nnode_modules/simple-swizzle/package.json\\nnode_modules/slice-ansi/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spawn-wrap/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/stack-trace/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/table/node_modules/ansi-regex/package.json\\nnode_modules/table/node_modules/string-width/package.json\\nnode_modules/table/node_modules/strip-ansi/package.json\\nnode_modules/table/package.json\\nnode_modules/test-exclude/package.json\\nnode_modules/text-hex/package.json\\nnode_modules/text-table/package.json\\nnode_modules/through/package.json\\nnode_modules/tmp/package.json\\nnode_modules/to-fast-properties/package.json\\nnode_modules/triple-beam/package.json\\nnode_modules/tslib/package.json\\nnode_modules/type-check/package.json\\nnode_modules/type-is/package.json\\nnode_modules/uglify-js/node_modules/commander/package.json\\nnode_modules/uglify-js/node_modules/source-map/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/uuid/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/which-module/package.json\\nnode_modules/which/package.json\\nnode_modules/winston-transport/node_modules/readable-stream/package.json\\nnode_modules/winston-transport/node_modules/string_decoder/package.json\\nnode_modules/winston-transport/package.json\\nnode_modules/winston/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi/node_modules/string-width/package.json\\nnode_modules/wrap-ansi/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/write-file-atomic/package.json\\nnode_modules/write/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json" } ] }, "components": [ { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "13.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@13.1.1", "type": "library", "bom-ref": "pkg:npm/yargs-parser@13.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "13.3.0", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@13.3.0", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@13.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "5.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@5.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "3.1.0", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@3.1.0", "type": "library", "bom-ref": "pkg:npm/string-width@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "4.1.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@4.1.0", "type": "library", "bom-ref": "pkg:npm/ansi-regex@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "2.1.2", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "4.0.0", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "write-file-atomic", "version": "2.4.3", "description": "Write files in an atomic fashion w/configurable ownership", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/write-file-atomic@2.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/write-file-atomic" } ], "type": "library", "bom-ref": "pkg:npm/write-file-atomic@2.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/write-file-atomic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/write-file-atomic/package.json" } ], "concludedValue": "node_modules/write-file-atomic/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "write", "version": "1.0.3", "description": "Write data to a file, replacing the file if it already exists and creating any intermediate directories if they don't already exist. Thin wrapper around node's native fs methods.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/write@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/write" } ], "type": "library", "bom-ref": "pkg:npm/write@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/write/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/write/package.json" } ], "concludedValue": "node_modules/write/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "5.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@5.1.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "0.0.3", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Charlie Robbins " } ], "group": "", "name": "winston-transport", "version": "4.3.0", "description": "Base stream implementations for winston@3 and up.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/winston-transport@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/winstonjs/winston-transport#readme" } ], "type": "library", "bom-ref": "pkg:npm/winston-transport@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/winston-transport/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/winston-transport/package.json" } ], "concludedValue": "node_modules/winston-transport/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/winston-transport/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/winston-transport/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/winston-transport/node_modules/string_decoder/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.6", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/winston-transport/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/winston-transport/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/winston-transport/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Charlie Robbins " } ], "group": "", "name": "winston", "version": "3.2.1", "description": "A logger for just about everything.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/winston@3.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/winstonjs/winston.git" } ], "type": "library", "bom-ref": "pkg:npm/winston@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/winston/package.json" }, { "name": "ImportedModules", "value": "winston" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/winston/package.json" } ], "concludedValue": "node_modules/winston/package.json" } ], "occurrences": [ { "location": "index.js", "line": 21 } ] } }, { "authors": [ { "name": "nexdrew" } ], "group": "", "name": "which-module", "version": "2.0.0", "description": "Find the module object for something that was require()d", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-module@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nexdrew/which-module#readme" }, { "type": "vcs", "url": "git+https://github.com/nexdrew/which-module.git" } ], "type": "library", "bom-ref": "pkg:npm/which-module@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/which-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-module/package.json" } ], "concludedValue": "node_modules/which-module/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.3.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "validate-npm-package-license", "version": "3.0.4", "description": "Give me a string and I'll tell you if it's a valid npm package license string", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-license@3.0.4", "type": "library", "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-license/package.json" } ], "concludedValue": "node_modules/validate-npm-package-license/package.json" } ] } }, { "group": "", "name": "uuid", "version": "3.3.3", "description": "RFC4122 (v1, v4, and v5) UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@3.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kelektiv/node-uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Gary Court " } ], "group": "", "name": "uri-js", "version": "4.2.2", "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-js@4.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/garycourt/uri-js" }, { "type": "vcs", "url": "http://github.com/garycourt/uri-js" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-js/package.json" } ], "concludedValue": "node_modules/uri-js/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "uglify-js", "version": "3.6.0", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@3.6.0", "type": "library", "bom-ref": "pkg:npm/uglify-js@3.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/node_modules/source-map/package.json" }, { "name": "SrcFile", "value": "node_modules/merge-source-map/node_modules/source-map/package.json" }, { "name": "SrcFile", "value": "node_modules/istanbul-lib-source-maps/node_modules/source-map/package.json" }, { "name": "SrcFile", "value": "node_modules/handlebars/node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/handlebars/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/handlebars/node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.1", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/node_modules/commander/package.json" } ], "concludedValue": "node_modules/uglify-js/node_modules/commander/package.json" } ] } }, { "group": "", "name": "type-is", "version": "1.6.18", "description": "Infer the content-type of a request.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-is@1.6.18", "type": "library", "bom-ref": "pkg:npm/type-is@1.6.18", "properties": [ { "name": "SrcFile", "value": "node_modules/type-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-is/package.json" } ], "concludedValue": "node_modules/type-is/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "type-check", "version": "0.3.2", "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-check@0.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/type-check" }, { "type": "vcs", "url": "git://github.com/gkz/type-check.git" } ], "type": "library", "bom-ref": "pkg:npm/type-check@0.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/type-check/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-check/package.json" } ], "concludedValue": "node_modules/type-check/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "tslib", "version": "1.10.0", "description": "Runtime library for TypeScript helper functions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@1.10.0", "externalReferences": [ { "type": "website", "url": "http://typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/tslib.git" } ], "type": "library", "bom-ref": "pkg:npm/tslib@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tslib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tslib/package.json" } ], "concludedValue": "node_modules/tslib/package.json" } ] } }, { "authors": [ { "name": "Charlie Robbins " } ], "group": "", "name": "triple-beam", "version": "1.3.0", "description": "Definitions of levels for logging purposes & shareable Symbol constants.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/triple-beam@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/winstonjs/triple-beam#readme" }, { "type": "vcs", "url": "git+https://github.com/winstonjs/triple-beam.git" } ], "type": "library", "bom-ref": "pkg:npm/triple-beam@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/triple-beam/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/triple-beam/package.json" } ], "concludedValue": "node_modules/triple-beam/package.json" } ] }, "tags": [ "logging" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "to-fast-properties", "version": "2.0.0", "description": "Force V8 to use fast properties for an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-fast-properties@2.0.0", "type": "library", "bom-ref": "pkg:npm/to-fast-properties@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/to-fast-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-fast-properties/package.json" } ], "concludedValue": "node_modules/to-fast-properties/package.json" } ] } }, { "authors": [ { "name": "KARASZI István (http://raszi.hu/)" } ], "group": "", "name": "tmp", "version": "0.0.33", "description": "Temporary file and directory creator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tmp@0.0.33", "externalReferences": [ { "type": "vcs", "url": "http://github.com/raszi/node-tmp" } ], "type": "library", "bom-ref": "pkg:npm/tmp@0.0.33", "properties": [ { "name": "SrcFile", "value": "node_modules/tmp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tmp/package.json" } ], "concludedValue": "node_modules/tmp/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through/package.json" } ], "concludedValue": "node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "text-table", "version": "0.2.0", "description": "borderless text tables with alignment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-table@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/text-table" }, { "type": "vcs", "url": "git://github.com/substack/text-table.git" } ], "type": "library", "bom-ref": "pkg:npm/text-table@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/text-table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/text-table/package.json" } ], "concludedValue": "node_modules/text-table/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "text-hex", "version": "1.0.0", "description": "Generate a hex color from the given text", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-hex@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/3rd-Eden/text-hex" }, { "type": "vcs", "url": "https://github.com/3rd-Eden/text-hex" } ], "type": "library", "bom-ref": "pkg:npm/text-hex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/text-hex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/text-hex/package.json" } ], "concludedValue": "node_modules/text-hex/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "test-exclude", "version": "5.2.3", "description": "test for inclusion or exclusion of paths using pkg-conf and globs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/test-exclude@5.2.3", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/test-exclude@5.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/package.json" } ], "concludedValue": "node_modules/test-exclude/package.json" } ] } }, { "authors": [ { "name": "Gajus Kuizinas (http://gajus.com)" } ], "group": "", "name": "table", "version": "5.4.6", "description": "Formats data into a string table.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/table@5.4.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gajus/table" } ], "type": "library", "bom-ref": "pkg:npm/table@5.4.6", "properties": [ { "name": "SrcFile", "value": "node_modules/table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/table/package.json" } ], "concludedValue": "node_modules/table/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "5.5.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@5.5.0", "type": "library", "bom-ref": "pkg:npm/supports-color@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "2.0.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@2.0.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-bom", "version": "3.0.0", "description": "Strip UTF-8 byte order mark (BOM) from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom@3.0.0", "type": "library", "bom-ref": "pkg:npm/strip-bom@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-bom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-bom/package.json" } ], "concludedValue": "node_modules/strip-bom/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "4.0.0", "description": "Strip ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@4.0.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.3.0", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.0", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/string_decoder/node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "2.1.1", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@2.1.1", "type": "library", "bom-ref": "pkg:npm/string-width@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "stack-trace", "version": "0.0.10", "description": "Get v8 stack traces as an array of CallSite objects.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stack-trace@0.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-stack-trace" }, { "type": "vcs", "url": "git://github.com/felixge/node-stack-trace.git" } ], "type": "library", "bom-ref": "pkg:npm/stack-trace@0.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/stack-trace/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stack-trace/package.json" } ], "concludedValue": "node_modules/stack-trace/package.json" } ] } }, { "authors": [ { "name": "Alexandru Marasteanu (http://alexei.ro/)" } ], "group": "", "name": "sprintf-js", "version": "1.0.3", "description": "JavaScript sprintf implementation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexei/sprintf.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/sprintf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sprintf-js/package.json" } ], "concludedValue": "node_modules/sprintf-js/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.5", "description": "A list of SPDX license identifiers", "scope": "optional", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.5", "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (http://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "3.0.0", "description": "parse SPDX license expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.0", "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.2.0", "description": "list of SPDX standard license exceptions", "scope": "optional", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.2.0", "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/spdx-exceptions/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-correct", "version": "3.1.0", "description": "correct invalid SPDX expressions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-correct@3.1.0", "type": "library", "bom-ref": "pkg:npm/spdx-correct@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-correct/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-correct/package.json" } ], "concludedValue": "node_modules/spdx-correct/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "spawn-wrap", "version": "1.4.3", "description": "Wrap all spawned Node.js child processes by adding environs and arguments ahead of the main JavaScript file argument.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spawn-wrap@1.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/spawn-wrap#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/spawn-wrap.git" } ], "type": "library", "bom-ref": "pkg:npm/spawn-wrap@1.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/spawn-wrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spawn-wrap/package.json" } ], "concludedValue": "node_modules/spawn-wrap/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "group": "", "name": "slice-ansi", "version": "2.1.0", "description": "Slice a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slice-ansi@2.1.0", "type": "library", "bom-ref": "pkg:npm/slice-ansi@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slice-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slice-ansi/package.json" } ], "concludedValue": "node_modules/slice-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "simple-swizzle", "version": "0.2.2", "description": "Simply swizzle your arguments", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-swizzle@0.2.2", "type": "library", "bom-ref": "pkg:npm/simple-swizzle@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-swizzle/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-swizzle/package.json" } ], "concludedValue": "node_modules/simple-swizzle/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.3.2", "description": "Determines if an object can be used as an array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-swizzle/node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-swizzle/node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/simple-swizzle/node_modules/is-arrayish/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "3.0.2", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit" }, { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Denis Bardadym " } ], "group": "", "name": "should-util", "version": "1.0.1", "description": "Utility functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-util@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shouldjs/util#readme" }, { "type": "vcs", "url": "git+https://github.com/shouldjs/util.git" } ], "type": "library", "bom-ref": "pkg:npm/should-util@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/should-util/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/should-util/package.json" } ], "concludedValue": "node_modules/should-util/package.json" } ] } }, { "authors": [ { "name": "Denis Bardadym " } ], "group": "", "name": "should-type-adaptors", "version": "1.1.0", "description": "Small utility functions to use the same traversing etc code on different types", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-type-adaptors@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shouldjs/type-adaptors#readme" }, { "type": "vcs", "url": "git+https://github.com/shouldjs/type-adaptors.git" } ], "type": "library", "bom-ref": "pkg:npm/should-type-adaptors@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/should-type-adaptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/should-type-adaptors/package.json" } ], "concludedValue": "node_modules/should-type-adaptors/package.json" } ] } }, { "authors": [ { "name": "Denis Bardadym " } ], "group": "", "name": "should-type", "version": "1.4.0", "description": "Simple module to get instance type. Like a bit more advanced version of typeof", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-type@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shouldjs/type" }, { "type": "vcs", "url": "https://github.com/shouldjs/type.git" } ], "type": "library", "bom-ref": "pkg:npm/should-type@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/should-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/should-type/package.json" } ], "concludedValue": "node_modules/should-type/package.json" } ] } }, { "authors": [ { "name": "Denis Bardadym " } ], "group": "", "name": "should-format", "version": "3.0.3", "description": "Formatting of objects for should.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-format@3.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shouldjs/format.git" } ], "type": "library", "bom-ref": "pkg:npm/should-format@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/should-format/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/should-format/package.json" } ], "concludedValue": "node_modules/should-format/package.json" } ] } }, { "authors": [ { "name": "Denis Bardadym " } ], "group": "", "name": "should-equal", "version": "2.0.0", "description": "Deep comparison of 2 instances for should.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-equal@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shouldjs/equal" }, { "type": "vcs", "url": "https://github.com/shouldjs/equal.git" } ], "type": "library", "bom-ref": "pkg:npm/should-equal@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/should-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/should-equal/package.json" } ], "concludedValue": "node_modules/should-equal/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " }, { "name": " Denis Bardadym " } ], "group": "", "name": "should", "version": "13.2.3", "description": "test framework agnostic BDD-style assertions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should@13.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shouldjs/should.js" }, { "type": "vcs", "url": "https://github.com/shouldjs/should.js.git" } ], "type": "framework", "bom-ref": "pkg:npm/should@13.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/should/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/should/package.json" } ], "concludedValue": "node_modules/should/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "1.0.0", "description": "Regular expression for matching a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@1.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Martensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "1.2.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@1.2.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "set-blocking", "version": "2.0.0", "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-blocking@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/set-blocking#readme" }, { "type": "vcs", "url": "git+https://github.com/yargs/set-blocking.git" } ], "type": "library", "bom-ref": "pkg:npm/set-blocking@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-blocking/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-blocking/package.json" } ], "concludedValue": "node_modules/set-blocking/package.json" } ] } }, { "group": "", "name": "semver", "version": "5.7.1", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.1", "type": "library", "bom-ref": "pkg:npm/semver@5.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Ben Lesh " } ], "group": "", "name": "rxjs", "version": "6.5.3", "description": "Reactive Extensions for modern JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rxjs@6.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ReactiveX/RxJS" }, { "type": "vcs", "url": "https://github.com/reactivex/rxjs.git" } ], "type": "library", "bom-ref": "pkg:npm/rxjs@6.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/package.json" } ], "concludedValue": "node_modules/rxjs/package.json" } ] } }, { "group": "", "name": "rxjs/webSocket", "version": "", "scope": "optional", "purl": "pkg:npm/rxjs%2FwebSocket", "type": "library", "bom-ref": "pkg:npm/rxjs/webSocket", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/webSocket/package.json" }, { "name": "SrcFile", "value": "node_modules/rxjs/src/webSocket/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/src/webSocket/package.json" } ], "concludedValue": "node_modules/rxjs/src/webSocket/package.json" } ] } }, { "group": "", "name": "rxjs/testing", "version": "", "scope": "optional", "purl": "pkg:npm/rxjs%2Ftesting", "type": "library", "bom-ref": "pkg:npm/rxjs/testing", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/testing/package.json" }, { "name": "SrcFile", "value": "node_modules/rxjs/src/testing/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/src/testing/package.json" } ], "concludedValue": "node_modules/rxjs/src/testing/package.json" } ] } }, { "group": "", "name": "rxjs/operators", "version": "", "scope": "optional", "purl": "pkg:npm/rxjs%2Foperators", "type": "library", "bom-ref": "pkg:npm/rxjs/operators", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/src/operators/package.json" }, { "name": "SrcFile", "value": "node_modules/rxjs/operators/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/operators/package.json" } ], "concludedValue": "node_modules/rxjs/operators/package.json" } ] } }, { "group": "", "name": "rxjs/internal-compatibility", "version": "", "scope": "optional", "purl": "pkg:npm/rxjs%2Finternal-compatibility", "type": "library", "bom-ref": "pkg:npm/rxjs/internal-compatibility", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/src/internal-compatibility/package.json" }, { "name": "SrcFile", "value": "node_modules/rxjs/internal-compatibility/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/internal-compatibility/package.json" } ], "concludedValue": "node_modules/rxjs/internal-compatibility/package.json" } ] } }, { "group": "", "name": "rxjs/fetch", "version": "", "scope": "optional", "purl": "pkg:npm/rxjs%2Ffetch", "type": "library", "bom-ref": "pkg:npm/rxjs/fetch", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/src/fetch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/src/fetch/package.json" } ], "concludedValue": "node_modules/rxjs/src/fetch/package.json" } ] } }, { "group": "", "name": "rxjs/ajax", "version": "", "scope": "optional", "purl": "pkg:npm/rxjs%2Fajax", "type": "library", "bom-ref": "pkg:npm/rxjs/ajax", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/src/ajax/package.json" }, { "name": "SrcFile", "value": "node_modules/rxjs/ajax/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/ajax/package.json" } ], "concludedValue": "node_modules/rxjs/ajax/package.json" } ] } }, { "authors": [ { "name": "Simon Boudrias " } ], "group": "", "name": "run-async", "version": "2.3.0", "description": "Utility method to run function either synchronously or asynchronously using the common `this.async()` style.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-async@2.3.0", "type": "library", "bom-ref": "pkg:npm/run-async@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/run-async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/run-async/package.json" } ], "concludedValue": "node_modules/run-async/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.6.3", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.6.3", "type": "library", "bom-ref": "pkg:npm/rimraf@2.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "restore-cursor", "version": "2.0.0", "description": "Gracefully restore the CLI cursor on exit", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/restore-cursor@2.0.0", "type": "library", "bom-ref": "pkg:npm/restore-cursor@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/restore-cursor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/restore-cursor/package.json" } ], "concludedValue": "node_modules/restore-cursor/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "4.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@4.0.0", "type": "library", "bom-ref": "pkg:npm/resolve-from@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.12.0", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.12.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "monorepo-symlink-test", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid main", "version": "", "scope": "optional", "purl": "pkg:npm/invalid%20main", "type": "library", "bom-ref": "pkg:npm/invalid main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "scope": "optional", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "require-main-filename", "version": "2.0.0", "description": "shim for require.main.filename() that works in as many environments as possible", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-main-filename@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/require-main-filename#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/require-main-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/require-main-filename@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/require-main-filename/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-main-filename/package.json" } ], "concludedValue": "node_modules/require-main-filename/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Mark Wubben (https://novemberborn.net/)" } ], "group": "", "name": "release-zalgo", "version": "1.0.0", "description": "Helps you write code with promise-like chains that can run both synchronously and asynchronously", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/release-zalgo@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/novemberborn/release-zalgo#readme" }, { "type": "vcs", "url": "git+https://github.com/novemberborn/release-zalgo.git" } ], "type": "library", "bom-ref": "pkg:npm/release-zalgo@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/release-zalgo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/release-zalgo/package.json" } ], "concludedValue": "node_modules/release-zalgo/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima (https://github.com/mysticatea)" } ], "group": "", "name": "regexpp", "version": "2.0.1", "description": "Regular expression parser for ECMAScript 2018.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexpp@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/regexpp#readme" }, { "type": "vcs", "url": "git+https://github.com/mysticatea/regexpp.git" } ], "type": "library", "bom-ref": "pkg:npm/regexpp@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpp/package.json" } ], "concludedValue": "node_modules/regexpp/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "3.4.0", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@3.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg-up", "version": "4.0.0", "description": "Read the closest package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg-up@4.0.0", "type": "library", "bom-ref": "pkg:npm/read-pkg-up@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg-up/package.json" } ], "concludedValue": "node_modules/read-pkg-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "3.0.0", "description": "Read a package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@3.0.0", "type": "library", "bom-ref": "pkg:npm/read-pkg@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/read-pkg/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "range-parser", "version": "1.2.1", "description": "Range header field string parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/range-parser@1.2.1", "type": "library", "bom-ref": "pkg:npm/range-parser@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/range-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/range-parser/package.json" } ], "concludedValue": "node_modules/range-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "2.1.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.1.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "pseudomap", "version": "1.0.2", "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pseudomap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/pseudomap#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/pseudomap.git" } ], "type": "library", "bom-ref": "pkg:npm/pseudomap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pseudomap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pseudomap/package.json" } ], "concludedValue": "node_modules/pseudomap/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "progress", "version": "2.0.3", "description": "Flexible ascii progress bar", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/progress@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/node-progress" } ], "type": "library", "bom-ref": "pkg:npm/progress@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/progress/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/progress/package.json" } ], "concludedValue": "node_modules/progress/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "prelude-ls", "version": "1.1.2", "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.", "scope": "optional", "purl": "pkg:npm/prelude-ls@1.1.2", "externalReferences": [ { "type": "website", "url": "http://preludels.com" }, { "type": "vcs", "url": "git://github.com/gkz/prelude-ls.git" } ], "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/prelude-ls/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prelude-ls/package.json" } ], "concludedValue": "node_modules/prelude-ls/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pkg-dir", "version": "3.0.0", "description": "Find the root directory of a Node.js project or npm package", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-dir@3.0.0", "type": "library", "bom-ref": "pkg:npm/pkg-dir@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-dir/package.json" } ], "concludedValue": "node_modules/pkg-dir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "4.0.1", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@4.0.1", "type": "library", "bom-ref": "pkg:npm/pify@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-type", "version": "3.0.0", "description": "Check if a path is a file, directory, or symlink", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@3.0.0", "type": "library", "bom-ref": "pkg:npm/path-type@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-type/package.json" } ], "concludedValue": "node_modules/path-type/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "3.0.0", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@3.0.0", "type": "library", "bom-ref": "pkg:npm/pify@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/node_modules/pify/package.json" }, { "name": "SrcFile", "value": "node_modules/load-json-file/node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/node_modules/pify/package.json" } ], "concludedValue": "node_modules/load-json-file/node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.6", "description": "Node.js path.parse() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "2.0.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@2.0.1", "type": "library", "bom-ref": "pkg:npm/path-key@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me)" } ], "group": "", "name": "path-is-inside", "version": "1.0.2", "description": "Tests whether one path is inside another path", "scope": "optional", "licenses": [ { "expression": "WTFPL OR MIT" } ], "purl": "pkg:npm/path-is-inside@1.0.2", "type": "library", "bom-ref": "pkg:npm/path-is-inside@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-inside/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-inside/package.json" } ], "concludedValue": "node_modules/path-is-inside/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "3.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@3.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "group": "", "name": "parseurl", "version": "1.3.3", "description": "parse a url with memoization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parseurl@1.3.3", "type": "library", "bom-ref": "pkg:npm/parseurl@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/parseurl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parseurl/package.json" } ], "concludedValue": "node_modules/parseurl/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "4.0.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@4.0.0", "type": "library", "bom-ref": "pkg:npm/parse-json@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parent-module", "version": "1.0.1", "description": "Get the path of the parent module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parent-module@1.0.1", "type": "library", "bom-ref": "pkg:npm/parent-module@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parent-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parent-module/package.json" } ], "concludedValue": "node_modules/parent-module/package.json" } ] } }, { "authors": [ { "name": "Mark Wubben (https://novemberborn.net/)" } ], "group": "", "name": "package-hash", "version": "3.0.0", "description": "Generates a hash for an installed npm package, useful for salting caches", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package-hash@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/novemberborn/package-hash#readme" }, { "type": "vcs", "url": "git+https://github.com/novemberborn/package-hash.git" } ], "type": "library", "bom-ref": "pkg:npm/package-hash@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/package-hash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-hash/package.json" } ], "concludedValue": "node_modules/package-hash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "2.2.0", "description": "`Start a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@2.2.0", "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "3.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@3.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "2.2.1", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@2.2.1", "type": "library", "bom-ref": "pkg:npm/p-limit@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-tmpdir", "version": "1.0.2", "description": "Node.js os.tmpdir() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-tmpdir@1.0.2", "type": "library", "bom-ref": "pkg:npm/os-tmpdir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-tmpdir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-tmpdir/package.json" } ], "concludedValue": "node_modules/os-tmpdir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-homedir", "version": "1.0.2", "description": "Node.js 4 `os.homedir()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-homedir@1.0.2", "type": "library", "bom-ref": "pkg:npm/os-homedir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-homedir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-homedir/package.json" } ], "concludedValue": "node_modules/os-homedir/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "optionator", "version": "0.8.2", "description": "option parsing and help generation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optionator@0.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/optionator" }, { "type": "vcs", "url": "git://github.com/gkz/optionator.git" } ], "type": "library", "bom-ref": "pkg:npm/optionator@0.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/optionator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optionator/package.json" } ], "concludedValue": "node_modules/optionator/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "1.0.0", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/optionator/node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optionator/node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/optionator/node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "optimist", "version": "0.6.1", "description": "Light-weight option parsing with an argv hash. No optstrings attached.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optimist@0.6.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-optimist.git" } ], "type": "library", "bom-ref": "pkg:npm/optimist@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/optimist/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optimist/package.json" } ], "concludedValue": "node_modules/optimist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "onetime", "version": "2.0.1", "description": "Ensure a function is only called once", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/onetime@2.0.1", "type": "library", "bom-ref": "pkg:npm/onetime@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/onetime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/onetime/package.json" } ], "concludedValue": "node_modules/onetime/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "one-time", "version": "0.0.4", "description": "Run the supplied function exactly one time (once)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/one-time@0.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unshiftio/one-time" } ], "type": "library", "bom-ref": "pkg:npm/one-time@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/one-time/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/one-time/package.json" } ], "concludedValue": "node_modules/one-time/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "nyc", "version": "14.1.1", "description": "the Istanbul command line interface", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nyc@14.1.1", "type": "library", "bom-ref": "pkg:npm/nyc@14.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nyc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nyc/package.json" } ], "concludedValue": "node_modules/nyc/package.json" } ] } }, { "authors": [ { "name": "Meryn Stol " } ], "group": "", "name": "normalize-package-data", "version": "2.5.0", "description": "Normalizes data that can be found in package.json files.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@2.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "Howard Abrams (http://www.github.com/howardabrams)" } ], "group": "", "name": "node-mocks-http", "version": "1.8.0", "description": "Mock 'http' objects for testing Express routing functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-mocks-http@1.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/howardabrams/node-mocks-http" }, { "type": "vcs", "url": "git://github.com/howardabrams/node-mocks-http.git" } ], "type": "library", "bom-ref": "pkg:npm/node-mocks-http@1.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-mocks-http/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-mocks-http/package.json" } ], "concludedValue": "node_modules/node-mocks-http/package.json" } ] } }, { "group": "", "name": "nice-try", "version": "1.0.5", "description": "Tries to execute a function and discards any error that occurs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nice-try@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/electerious/nice-try" }, { "type": "vcs", "url": "https://github.com/electerious/nice-try.git" } ], "type": "library", "bom-ref": "pkg:npm/nice-try@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/nice-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nice-try/package.json" } ], "concludedValue": "node_modules/nice-try/package.json" } ] } }, { "authors": [ { "name": "Matt Lavin " } ], "group": "", "name": "nested-error-stacks", "version": "2.1.0", "description": "An Error subclass that will chain nested Errors and dump nested stacktraces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nested-error-stacks@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mdlavin/nested-error-stacks.git" } ], "type": "library", "bom-ref": "pkg:npm/nested-error-stacks@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nested-error-stacks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nested-error-stacks/package.json" } ], "concludedValue": "node_modules/nested-error-stacks/package.json" } ] } }, { "group": "", "name": "neo-async", "version": "2.6.1", "description": "Neo-Async is thought to be used as a drop-in replacement for Async, it almost fully covers its functionality and runs faster ", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/neo-async@2.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/suguru03/neo-async" } ], "type": "library", "bom-ref": "pkg:npm/neo-async@2.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/neo-async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/neo-async/package.json" } ], "concludedValue": "node_modules/neo-async/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "0.6.2", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@0.6.2", "type": "library", "bom-ref": "pkg:npm/negotiator@0.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "authors": [ { "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)" } ], "group": "", "name": "natural-compare", "version": "1.4.0", "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/natural-compare@1.4.0", "type": "library", "bom-ref": "pkg:npm/natural-compare@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/natural-compare/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/natural-compare/package.json" } ], "concludedValue": "node_modules/natural-compare/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "mute-stream", "version": "0.0.7", "description": "Bytes go in, but they don't come out (when muted).", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mute-stream@0.0.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/mute-stream" } ], "type": "library", "bom-ref": "pkg:npm/mute-stream@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/mute-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mute-stream/package.json" } ], "concludedValue": "node_modules/mute-stream/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.2", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.2", "type": "library", "bom-ref": "pkg:npm/ms@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "5.2.0", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@5.2.0", "externalReferences": [ { "type": "website", "url": "https://mochajs.org" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "5.4.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@5.4.0", "type": "library", "bom-ref": "pkg:npm/supports-color@5.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/supports-color/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/ms/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.2", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/glob/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "3.1.0", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@3.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/debug/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.1", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.0.4", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-fn", "version": "1.2.0", "description": "Make a function mimic another one", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-fn@1.2.0", "type": "library", "bom-ref": "pkg:npm/mimic-fn@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-fn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-fn/package.json" } ], "concludedValue": "node_modules/mimic-fn/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.24", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.24", "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.24", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.40.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.40.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.40.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "1.6.0", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-mime" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "group": "", "name": "methods", "version": "1.1.2", "description": "HTTP methods that node supports", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/methods@1.1.2", "type": "library", "bom-ref": "pkg:npm/methods@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/methods/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/methods/package.json" } ], "concludedValue": "node_modules/methods/package.json" } ] } }, { "authors": [ { "name": "keik " } ], "group": "", "name": "merge-source-map", "version": "1.1.0", "description": "Merge old source map and new source map in multi-transform flow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-source-map@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/keik/merge-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/merge-source-map@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-source-map/package.json" } ], "concludedValue": "node_modules/merge-source-map/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "merge-descriptors", "version": "1.0.1", "description": "Merge objects using descriptors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-descriptors@1.0.1", "type": "library", "bom-ref": "pkg:npm/merge-descriptors@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-descriptors/package.json" } ], "concludedValue": "node_modules/merge-descriptors/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "media-typer", "version": "0.3.0", "description": "Simple RFC 6838 media type parser and formatter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/media-typer@0.3.0", "type": "library", "bom-ref": "pkg:npm/media-typer@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/media-typer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/media-typer/package.json" } ], "concludedValue": "node_modules/media-typer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "2.1.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@2.1.0", "type": "library", "bom-ref": "pkg:npm/make-dir@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "4.1.5", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@4.1.5", "type": "library", "bom-ref": "pkg:npm/lru-cache@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Charlie Robbins " } ], "group": "", "name": "logform", "version": "2.1.2", "description": "An mutable object-based log format designed for chaining & objectMode streams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/logform@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/winstonjs/logform#readme" }, { "type": "vcs", "url": "git+https://github.com/winstonjs/logform.git" } ], "type": "library", "bom-ref": "pkg:npm/logform@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/logform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/logform/package.json" } ], "concludedValue": "node_modules/logform/package.json" } ] }, "tags": [ "log" ] }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.flattendeep", "version": "4.4.0", "description": "The lodash method `_.flattenDeep` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.flattendeep@4.4.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.flattendeep/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.flattendeep/package.json" } ], "concludedValue": "node_modules/lodash.flattendeep/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.17.15", "description": "Lodash modular utilities.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.17.15", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.15", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "ImportedModules", "value": "lodash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ], "occurrences": [ { "location": "index.js", "line": 24 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "3.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@3.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "load-json-file", "version": "4.0.0", "description": "Read and parse a JSON file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/load-json-file@4.0.0", "type": "library", "bom-ref": "pkg:npm/load-json-file@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/load-json-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/package.json" } ], "concludedValue": "node_modules/load-json-file/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "levn", "version": "0.3.0", "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/levn@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/levn" }, { "type": "vcs", "url": "git://github.com/gkz/levn.git" } ], "type": "library", "bom-ref": "pkg:npm/levn@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/levn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/levn/package.json" } ], "concludedValue": "node_modules/levn/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "kuler", "version": "1.0.1", "description": "Color your terminal using CSS/hex color codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kuler@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/3rd-Eden/kuler" }, { "type": "vcs", "url": "https://github.com/3rd-Eden/kuler" } ], "type": "library", "bom-ref": "pkg:npm/kuler@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/kuler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kuler/package.json" } ], "concludedValue": "node_modules/kuler/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "json-stable-stringify-without-jsonify", "version": "1.0.1", "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/samn/json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/samn/json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stable-stringify-without-jsonify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stable-stringify-without-jsonify/package.json" } ], "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "json-schema-traverse", "version": "0.4.1", "description": "Traverse JSON Schema passing each schema object to callback", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/json-schema-traverse#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-traverse/package.json" } ], "concludedValue": "node_modules/json-schema-traverse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "json-parse-better-errors", "version": "1.0.2", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-better-errors@1.0.2", "type": "library", "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-better-errors/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "jsesc", "version": "2.5.2", "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsesc@2.5.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/jsesc" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/jsesc.git" } ], "type": "library", "bom-ref": "pkg:npm/jsesc@2.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jsesc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsesc/package.json" } ], "concludedValue": "node_modules/jsesc/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "3.13.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@3.13.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.13.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "4.0.0", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@4.0.0", "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-reports", "version": "2.2.6", "description": "istanbul reports", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-reports@2.2.6", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-reports@2.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-reports/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-reports/package.json" } ], "concludedValue": "node_modules/istanbul-reports/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-source-maps", "version": "3.0.6", "description": "Source maps support for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-source-maps@3.0.6", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-source-maps@3.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-source-maps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-source-maps/package.json" } ], "concludedValue": "node_modules/istanbul-lib-source-maps/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-report", "version": "2.0.8", "description": "Base reporting library for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-report@2.0.8", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-report@2.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "6.1.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@6.1.0", "type": "library", "bom-ref": "pkg:npm/supports-color@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-instrument", "version": "3.3.0", "description": "Core istanbul API for JS code coverage", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-instrument@3.3.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-instrument@3.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-instrument/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-instrument/package.json" } ], "concludedValue": "node_modules/istanbul-lib-instrument/package.json" } ] }, "tags": [ "api", "test" ] }, { "group": "", "name": "semver", "version": "6.3.0", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@6.3.0", "type": "library", "bom-ref": "pkg:npm/semver@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json" } ], "concludedValue": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-hook", "version": "2.0.7", "description": "Hooks for require, vm and script used in istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-hook@2.0.7", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-hook@2.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-hook/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-hook/package.json" } ], "concludedValue": "node_modules/istanbul-lib-hook/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-coverage", "version": "2.0.5", "description": "Data library for istanbul coverage objects", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-coverage@2.0.5", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-coverage@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "1.1.0", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-stream@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "is-promise", "version": "2.1.0", "description": "Test whether an object looks like a promises-a+ promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-promise@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/then/is-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/is-promise@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-promise/package.json" } ], "concludedValue": "node_modules/is-promise/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "2.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.2.1", "description": "Determines if an object can be used as an array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/is-arrayish/package.json" } ] } }, { "authors": [ { "name": "Simon Boudrias " } ], "group": "", "name": "inquirer", "version": "6.5.2", "description": "A collection of common interactive command line user interfaces.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inquirer@6.5.2", "type": "library", "bom-ref": "pkg:npm/inquirer@6.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/inquirer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inquirer/package.json" } ], "concludedValue": "node_modules/inquirer/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Jens Taylor (https://github.com/homebrewing)" } ], "group": "", "name": "imurmurhash", "version": "0.1.4", "description": "An incremental implementation of MurmurHash3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/imurmurhash@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" }, { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" } ], "type": "library", "bom-ref": "pkg:npm/imurmurhash@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/imurmurhash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/imurmurhash/package.json" } ], "concludedValue": "node_modules/imurmurhash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "import-fresh", "version": "3.1.0", "description": "Import a module while bypassing the cache", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-fresh@3.1.0", "type": "library", "bom-ref": "pkg:npm/import-fresh@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-fresh/package.json" } ], "concludedValue": "node_modules/import-fresh/package.json" } ] } }, { "authors": [ { "name": "kael" } ], "group": "", "name": "ignore", "version": "4.0.6", "description": "Ignore is a manager and filter for .gitignore rules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@4.0.6", "type": "library", "bom-ref": "pkg:npm/ignore@4.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore/package.json" } ], "concludedValue": "node_modules/ignore/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.4.24", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.4.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "hosted-git-info", "version": "2.8.4", "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@2.8.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@2.8.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.1.1", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "hasha", "version": "3.0.0", "description": "Hashing made simple. Get the hash of a buffer/string/stream/file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasha@3.0.0", "type": "library", "bom-ref": "pkg:npm/hasha@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hasha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasha/package.json" } ], "concludedValue": "node_modules/hasha/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "3.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@3.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Yehuda Katz" } ], "group": "", "name": "handlebars", "version": "4.4.0", "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/handlebars@4.4.0", "externalReferences": [ { "type": "website", "url": "http://www.handlebarsjs.com/" }, { "type": "vcs", "url": "https://github.com/wycats/handlebars.js.git" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/handlebars/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/handlebars/package.json" } ], "concludedValue": "node_modules/handlebars/package.json" } ] }, "tags": [ "templates" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "growl", "version": "1.10.5", "description": "Growl unobtrusive notifications", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/growl@1.10.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/tj/node-growl.git" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.10.5", "properties": [ { "name": "SrcFile", "value": "node_modules/growl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/growl/package.json" } ], "concludedValue": "node_modules/growl/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.2", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "globals", "version": "11.12.0", "description": "Global identifiers from different JavaScript environments", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globals@11.12.0", "type": "library", "bom-ref": "pkg:npm/globals@11.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globals/package.json" } ], "concludedValue": "node_modules/globals/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.4", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Mikola Lysenko" } ], "group": "", "name": "functional-red-black-tree", "version": "1.0.1", "description": "A fully persistent balanced binary search tree", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/functional-red-black-tree@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/mikolalysenko/functional-red-black-tree.git" } ], "type": "library", "bom-ref": "pkg:npm/functional-red-black-tree@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/functional-red-black-tree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/functional-red-black-tree/package.json" } ], "concludedValue": "node_modules/functional-red-black-tree/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "fresh", "version": "0.5.2", "description": "HTTP response freshness testing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fresh@0.5.2", "type": "library", "bom-ref": "pkg:npm/fresh@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fresh/package.json" } ], "concludedValue": "node_modules/fresh/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "1.5.6", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@1.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/foreground-child#readme" }, { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@1.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "cross-spawn", "version": "4.0.2", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@4.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-cross-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/foreground-child/node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "flatted", "version": "2.0.1", "description": "A super light and fast circular JSON parser.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/flatted@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/flatted#readme" }, { "type": "vcs", "url": "git+https://github.com/WebReflection/flatted.git" } ], "type": "library", "bom-ref": "pkg:npm/flatted@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/flatted/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flatted/package.json" } ], "concludedValue": "node_modules/flatted/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Roy Riojas (http://royriojas.com)" } ], "group": "", "name": "flat-cache", "version": "2.0.1", "description": "A stupidly simple key/value storage using files to persist some data", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/flat-cache@2.0.1", "type": "library", "bom-ref": "pkg:npm/flat-cache@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/flat-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat-cache/package.json" } ], "concludedValue": "node_modules/flat-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "3.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@3.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "group": "", "name": "find-cache-dir", "version": "2.1.0", "description": "Finds the common standard cache directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-cache-dir@2.1.0", "type": "library", "bom-ref": "pkg:npm/find-cache-dir@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-cache-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-cache-dir/package.json" } ], "concludedValue": "node_modules/find-cache-dir/package.json" } ] } }, { "authors": [ { "name": "Roy Riojas (http://royriojas.com)" } ], "group": "", "name": "file-entry-cache", "version": "5.0.1", "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/file-entry-cache@5.0.1", "type": "library", "bom-ref": "pkg:npm/file-entry-cache@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/file-entry-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/file-entry-cache/package.json" } ], "concludedValue": "node_modules/file-entry-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "figures", "version": "2.0.0", "description": "Unicode symbols with Windows CMD fallbacks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/figures@2.0.0", "type": "library", "bom-ref": "pkg:npm/figures@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/figures/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/figures/package.json" } ], "concludedValue": "node_modules/figures/package.json" } ] } }, { "authors": [ { "name": "Taylor Hakes" } ], "group": "", "name": "fecha", "version": "2.3.3", "description": "Date formatting and parsing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fecha@2.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/taylorhakes/fecha" }, { "type": "vcs", "url": "https://taylorhakes@github.com/taylorhakes/fecha.git" } ], "type": "library", "bom-ref": "pkg:npm/fecha@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fecha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fecha/package.json" } ], "concludedValue": "node_modules/fecha/package.json" } ] } }, { "authors": [ { "name": "David Mark Clements" } ], "group": "", "name": "fast-safe-stringify", "version": "2.0.7", "description": "Safely and quickly serialize JavaScript objects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-safe-stringify@2.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme" }, { "type": "vcs", "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-safe-stringify@2.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-safe-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-safe-stringify/package.json" } ], "concludedValue": "node_modules/fast-safe-stringify/package.json" } ] } }, { "authors": [ { "name": "Ramesh Nair (http://www.hiddentao.com/)" } ], "group": "", "name": "fast-levenshtein", "version": "2.0.6", "description": "Efficient implementation of Levenshtein algorithm with locale-specific collator support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-levenshtein@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hiddentao/fast-levenshtein.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-levenshtein@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-levenshtein/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-levenshtein/package.json" } ], "concludedValue": "node_modules/fast-levenshtein/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "fast-json-stable-stringify", "version": "2.0.0", "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-json-stable-stringify@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-json-stable-stringify/package.json" } ], "concludedValue": "node_modules/fast-json-stable-stringify/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "fast-deep-equal", "version": "2.0.1", "description": "Fast deep equal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-deep-equal@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-deep-equal#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/fast-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-deep-equal/package.json" } ], "concludedValue": "node_modules/fast-deep-equal/package.json" } ] } }, { "authors": [ { "name": "Kevin Gravier (https://mrkmg.com)" } ], "group": "", "name": "external-editor", "version": "3.1.0", "description": "Edit a string with the users preferred text editor using $VISUAL or $ENVIRONMENT", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/external-editor@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mrkmg/node-external-editor#readme" }, { "type": "vcs", "url": "git+https://github.com/mrkmg/node-external-editor.git" } ], "type": "library", "bom-ref": "pkg:npm/external-editor@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/external-editor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/external-editor/package.json" } ], "concludedValue": "node_modules/external-editor/package.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "description": "utility box for ECMAScript language tools", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esutils" }, { "type": "vcs", "url": "http://github.com/estools/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "4.3.0", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ] } }, { "group": "", "name": "esrecurse", "version": "4.2.1", "description": "ECMAScript AST recursive visitor", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esrecurse@4.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esrecurse" }, { "type": "vcs", "url": "https://github.com/estools/esrecurse.git" } ], "type": "library", "bom-ref": "pkg:npm/esrecurse@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esrecurse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esrecurse/package.json" } ], "concludedValue": "node_modules/esrecurse/package.json" } ] } }, { "authors": [ { "name": "Joel Feenstra " } ], "group": "", "name": "esquery", "version": "1.0.1", "description": "A query library for ECMAScript AST using a CSS selector like query language.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esquery@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jrfeenst/esquery.git" } ], "type": "library", "bom-ref": "pkg:npm/esquery@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esquery/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esquery/package.json" } ], "concludedValue": "node_modules/esquery/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "4.0.1", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "Nicholas C. Zakas " } ], "group": "", "name": "espree", "version": "5.0.1", "description": "An Esprima-compatible JavaScript parser built on Acorn", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/espree@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/espree" } ], "type": "library", "bom-ref": "pkg:npm/espree@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/espree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/espree/package.json" } ], "concludedValue": "node_modules/espree/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima (https://github.com/mysticatea)" } ], "group": "", "name": "eslint-visitor-keys", "version": "1.1.0", "description": "Constants and utilities about visitor keys to traverse AST.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-visitor-keys@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/eslint-visitor-keys#readme" } ], "type": "library", "bom-ref": "pkg:npm/eslint-visitor-keys@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-visitor-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-visitor-keys/package.json" } ], "concludedValue": "node_modules/eslint-visitor-keys/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima" } ], "group": "", "name": "eslint-utils", "version": "1.4.2", "description": "Utilities for ESLint plugins.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-utils@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/eslint-utils#readme" }, { "type": "vcs", "url": "git+https://github.com/mysticatea/eslint-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-utils@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-utils/package.json" } ], "concludedValue": "node_modules/eslint-utils/package.json" } ] }, "tags": [ "plugins" ] }, { "group": "", "name": "eslint-scope", "version": "4.0.3", "description": "ECMAScript scope analyzer for ESLint", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-scope@4.0.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/eslint/eslint-scope" } ], "type": "library", "bom-ref": "pkg:npm/eslint-scope@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-scope/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-scope/package.json" } ], "concludedValue": "node_modules/eslint-scope/package.json" } ] } }, { "authors": [ { "name": "Nicholas C. Zakas " } ], "group": "", "name": "eslint", "version": "5.16.0", "description": "An AST-based pattern checker for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint@5.16.0", "externalReferences": [ { "type": "website", "url": "https://eslint.org" } ], "type": "library", "bom-ref": "pkg:npm/eslint@5.16.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint/package.json" } ], "concludedValue": "node_modules/eslint/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Ben Youngblood" } ], "group": "", "name": "es6-error", "version": "4.1.1", "description": "Easily-extendable error for use with ES6 classes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-error@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bjyoungblood/es6-error" }, { "type": "vcs", "url": "https://github.com/bjyoungblood/es6-error.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-error@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-error/package.json" } ], "concludedValue": "node_modules/es6-error/package.json" } ] } }, { "group": "", "name": "error-ex", "version": "1.3.2", "description": "Easy error subclassing and stack customization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-ex@1.3.2", "type": "library", "bom-ref": "pkg:npm/error-ex@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/error-ex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-ex/package.json" } ], "concludedValue": "node_modules/error-ex/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "env-variable", "version": "0.0.5", "description": "Cross platform environment variables with process.env, window.name, location.hash and localStorage fallbacks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-variable@0.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/3rd-Eden/env-variable" }, { "type": "vcs", "url": "https://github.com/3rd-Eden/env-variable" } ], "type": "library", "bom-ref": "pkg:npm/env-variable@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/env-variable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-variable/package.json" } ], "concludedValue": "node_modules/env-variable/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "enabled", "version": "1.0.2", "description": "Check if a certain debug flag is enabled.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/enabled@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bigpipe/enabled.git" } ], "type": "library", "bom-ref": "pkg:npm/enabled@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/enabled/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/enabled/package.json" } ], "concludedValue": "node_modules/enabled/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "7.0.3", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@7.0.3", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@7.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "group": "", "name": "doctrine", "version": "3.0.0", "description": "JSDoc parser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/doctrine@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/doctrine" } ], "type": "library", "bom-ref": "pkg:npm/doctrine@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/doctrine/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/doctrine/package.json" } ], "concludedValue": "node_modules/doctrine/package.json" } ] } }, { "group": "", "name": "diff", "version": "3.5.0", "description": "A javascript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@3.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "diagnostics", "version": "1.1.1", "description": "Tools for debugging your node.js modules and event loop", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diagnostics@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bigpipe/diagnostics" }, { "type": "vcs", "url": "git://github.com/bigpipe/diagnostics.git" } ], "type": "library", "bom-ref": "pkg:npm/diagnostics@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/diagnostics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diagnostics/package.json" } ], "concludedValue": "node_modules/diagnostics/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "depd", "version": "1.1.2", "description": "Deprecate all the things", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/depd@1.1.2", "type": "library", "bom-ref": "pkg:npm/depd@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/depd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/depd/package.json" } ], "concludedValue": "node_modules/depd/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "default-require-extensions", "version": "2.0.0", "description": "Node's default require extensions as a separate module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/default-require-extensions@2.0.0", "type": "library", "bom-ref": "pkg:npm/default-require-extensions@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/default-require-extensions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/default-require-extensions/package.json" } ], "concludedValue": "node_modules/default-require-extensions/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "deep-is", "version": "0.1.3", "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-is@0.1.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/thlorenz/deep-is.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-is/package.json" } ], "concludedValue": "node_modules/deep-is/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "4.1.1", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "6.0.5", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@6.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@6.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "cp-file", "version": "6.2.0", "description": "Copy a file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cp-file@6.2.0", "type": "library", "bom-ref": "pkg:npm/cp-file@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cp-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cp-file/package.json" } ], "concludedValue": "node_modules/cp-file/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.6.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "commondir", "version": "1.0.1", "description": "compute the closest common parent for file paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commondir@1.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-commondir.git" } ], "type": "library", "bom-ref": "pkg:npm/commondir@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commondir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commondir/package.json" } ], "concludedValue": "node_modules/commondir/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.15.1", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.15.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.15.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "colorspace", "version": "1.1.2", "description": "Generate HEX colors for a given namespace.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/colorspace@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/3rd-Eden/colorspace" }, { "type": "vcs", "url": "https://github.com/3rd-Eden/colorspace" } ], "type": "library", "bom-ref": "pkg:npm/colorspace@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/colorspace/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colorspace/package.json" } ], "concludedValue": "node_modules/colorspace/package.json" } ] } }, { "authors": [ { "name": "Marak Squires" } ], "group": "", "name": "colors", "version": "1.4.0", "description": "get colors in your node.js console", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/colors@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Marak/colors.js" }, { "type": "vcs", "url": "http://github.com/Marak/colors.js.git" } ], "type": "library", "bom-ref": "pkg:npm/colors@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/colors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colors/package.json" } ], "concludedValue": "node_modules/colors/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley" } ], "group": "", "name": "colornames", "version": "1.1.1", "description": "Map color names to HEX color values.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/colornames@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/timoxley/colornames#readme" }, { "type": "vcs", "url": "git://github.com/timoxley/colornames.git" } ], "type": "library", "bom-ref": "pkg:npm/colornames@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/colornames/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colornames/package.json" } ], "concludedValue": "node_modules/colornames/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-string", "version": "1.5.3", "description": "Parser and generator for CSS color strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-string@1.5.3", "type": "library", "bom-ref": "pkg:npm/color-string@1.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-string/package.json" } ], "concludedValue": "node_modules/color-string/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.3", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dfcreative/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "1.9.3", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@1.9.3", "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "group": "", "name": "color", "version": "3.0.0", "description": "Color conversion and manipulation with CSS string support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color@3.0.0", "type": "library", "bom-ref": "pkg:npm/color@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color/package.json" } ], "concludedValue": "node_modules/color/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "5.0.0", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@5.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/yargs/cliui.git" } ], "type": "library", "bom-ref": "pkg:npm/cliui@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Ilya Radchenko " } ], "group": "", "name": "cli-width", "version": "2.2.0", "description": "Get stdout window width, with two fallbacks, tty and then a default.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-width@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/knownasilya/cli-width" } ], "type": "library", "bom-ref": "pkg:npm/cli-width@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-width/package.json" } ], "concludedValue": "node_modules/cli-width/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "cli-cursor", "version": "2.1.0", "description": "Toggle the CLI cursor", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-cursor@2.1.0", "type": "library", "bom-ref": "pkg:npm/cli-cursor@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-cursor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-cursor/package.json" } ], "concludedValue": "node_modules/cli-cursor/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Dmitry Shirokov " } ], "group": "", "name": "chardet", "version": "0.7.0", "description": "Character detector", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chardet@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/runk/node-chardet" } ], "type": "library", "bom-ref": "pkg:npm/chardet@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chardet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chardet/package.json" } ], "concludedValue": "node_modules/chardet/package.json" } ] } }, { "group": "", "name": "chalk", "version": "2.4.2", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@2.4.2", "type": "library", "bom-ref": "pkg:npm/chalk@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "index.js", "line": 22 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "5.3.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@5.3.1", "type": "library", "bom-ref": "pkg:npm/camelcase@5.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "callsites", "version": "3.1.0", "description": "Get callsites from the V8 stack trace API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/callsites@3.1.0", "type": "library", "bom-ref": "pkg:npm/callsites@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/callsites/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/callsites/package.json" } ], "concludedValue": "node_modules/callsites/package.json" } ] } }, { "group": "", "name": "caching-transform", "version": "3.0.2", "description": "Wraps a transform and provides caching", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caching-transform@3.0.2", "type": "library", "bom-ref": "pkg:npm/caching-transform@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/caching-transform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caching-transform/package.json" } ], "concludedValue": "node_modules/caching-transform/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.11", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.0", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "2.6.3", "description": "Higher-order functions and common patterns for asynchronous code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async@2.6.3", "externalReferences": [ { "type": "vcs", "url": "https://caolan.github.io/async/" }, { "type": "vcs", "url": "https://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@2.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async/package.json" } ], "concludedValue": "node_modules/async/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "astral-regex", "version": "1.0.0", "description": "Regular expression for matching astral symbols", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/astral-regex@1.0.0", "type": "library", "bom-ref": "pkg:npm/astral-regex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/astral-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/astral-regex/package.json" } ], "concludedValue": "node_modules/astral-regex/package.json" } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@1.0.10", "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "archy", "version": "1.0.0", "description": "render nested hierarchies `npm ls` style with unicode pipes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archy@1.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-archy.git" } ], "type": "library", "bom-ref": "pkg:npm/archy@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/archy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/archy/package.json" } ], "concludedValue": "node_modules/archy/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "append-transform", "version": "1.0.0", "description": "Install a transform to `require.extensions` that always runs last, even if additional extensions are added later.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/append-transform@1.0.0", "type": "library", "bom-ref": "pkg:npm/append-transform@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/append-transform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/append-transform/package.json" } ], "concludedValue": "node_modules/append-transform/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "3.2.1", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@3.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "3.0.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/ansi-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-escapes", "version": "3.2.0", "description": "ANSI escape codes for manipulating the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-escapes@3.2.0", "type": "library", "bom-ref": "pkg:npm/ansi-escapes@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-escapes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-escapes/package.json" } ], "concludedValue": "node_modules/ansi-escapes/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv", "version": "6.10.2", "description": "Another JSON Schema Validator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@6.10.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/ajv" }, { "type": "vcs", "url": "https://github.com/epoberezkin/ajv.git" } ], "type": "library", "bom-ref": "pkg:npm/ajv@6.10.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv/package.json" } ], "concludedValue": "node_modules/ajv/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "acorn-jsx", "version": "5.0.2", "description": "Alternative, faster React.js JSX parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-jsx@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/RReverser/acorn-jsx" }, { "type": "vcs", "url": "https://github.com/RReverser/acorn-jsx" } ], "type": "library", "bom-ref": "pkg:npm/acorn-jsx@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-jsx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-jsx/package.json" } ], "concludedValue": "node_modules/acorn-jsx/package.json" } ] } }, { "group": "", "name": "acorn", "version": "6.3.0", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@6.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "group": "", "name": "accepts", "version": "1.3.7", "description": "Higher-level content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/accepts@1.3.7", "type": "library", "bom-ref": "pkg:npm/accepts@1.3.7", "properties": [ { "name": "SrcFile", "value": "node_modules/accepts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/accepts/package.json" } ], "concludedValue": "node_modules/accepts/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "types", "version": "7.6.1", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.6.1", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "traverse", "version": "7.6.2", "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/traverse@7.6.2", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/traverse@7.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/traverse/package.json" } ], "concludedValue": "node_modules/@babel/traverse/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "template", "version": "7.6.0", "description": "Generate an AST from a string template.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/template@7.6.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/template@7.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/template/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/template/package.json" } ], "concludedValue": "node_modules/@babel/template/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "parser", "version": "7.6.2", "description": "A JavaScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.6.2", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "suchipi " } ], "group": "@babel", "name": "highlight", "version": "7.5.0", "description": "Syntax highlight JavaScript strings for output in terminals.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/highlight@7.5.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/highlight@7.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/highlight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/highlight/package.json" } ], "concludedValue": "node_modules/@babel/highlight/package.json" } ] } }, { "group": "@babel", "name": "helper-split-export-declaration", "version": "7.4.4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.4.4", "type": "library", "bom-ref": "pkg:npm/@babel/helper-split-export-declaration@7.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-split-export-declaration/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-split-export-declaration/package.json" } ], "concludedValue": "node_modules/@babel/helper-split-export-declaration/package.json" } ] } }, { "group": "@babel", "name": "helper-get-function-arity", "version": "7.0.0", "description": "Helper function to get function arity", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-get-function-arity@7.0.0", "type": "library", "bom-ref": "pkg:npm/@babel/helper-get-function-arity@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-get-function-arity/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-get-function-arity/package.json" } ], "concludedValue": "node_modules/@babel/helper-get-function-arity/package.json" } ] } }, { "group": "@babel", "name": "helper-function-name", "version": "7.1.0", "description": "Helper function to change the property 'name' of every function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-function-name@7.1.0", "type": "library", "bom-ref": "pkg:npm/@babel/helper-function-name@7.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-function-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-function-name/package.json" } ], "concludedValue": "node_modules/@babel/helper-function-name/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "generator", "version": "7.6.2", "description": "Turns an AST into code.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/generator@7.6.2", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/generator@7.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/generator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/generator/package.json" } ], "concludedValue": "node_modules/@babel/generator/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "code-frame", "version": "7.5.5", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.5.5", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/express-winston@3.4.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-02T08:46:12Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, October 2, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'express-winston' with version '3.4.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 302 source files." } ] }