{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:8fd44695-20e2-4d2f-8a09-44405bfde01a", "version": 1, "metadata": { "timestamp": "2026-10-18T02:48:25Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "acorn", "group": "", "version": "1.2.2", "description": "ECMAScript parser", "purl": "pkg:npm/acorn@1.2.2", "bom-ref": "pkg:npm/acorn@1.2.2", "properties": [ { "name": "cdx:npm:bin", "value": "acorn" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, prepublish" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/marijnh/acorn" }, { "type": "vcs", "url": "https://github.com/marijnh/acorn.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/Base64/package.json\\nnode_modules/JSONStream/package.json\\nnode_modules/acorn-babel/package.json\\nnode_modules/acorn-node/node_modules/acorn/package.json\\nnode_modules/acorn-node/node_modules/xtend/package.json\\nnode_modules/acorn-node/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/amdefine/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/asn1.js/node_modules/bn.js/package.json\\nnode_modules/asn1.js/package.json\\nnode_modules/assert/package.json\\nnode_modules/ast-types/package.json\\nnode_modules/astw/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/babel-core/package.json\\nnode_modules/babelify/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/bn.js/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/brorand/package.json\\nnode_modules/browser-pack/node_modules/JSONStream/package.json\\nnode_modules/browser-pack/node_modules/defined/package.json\\nnode_modules/browser-pack/node_modules/jsonparse/package.json\\nnode_modules/browser-pack/node_modules/readable-stream/package.json\\nnode_modules/browser-pack/node_modules/through2/package.json\\nnode_modules/browser-pack/package.json\\nnode_modules/browser-resolve/example/custom/package.json\\nnode_modules/browser-resolve/example/skip/package.json\\nnode_modules/browser-resolve/package.json\\nnode_modules/browserify-aes/package.json\\nnode_modules/browserify-cipher/package.json\\nnode_modules/browserify-derequire/package.json\\nnode_modules/browserify-des/package.json\\nnode_modules/browserify-rsa/package.json\\nnode_modules/browserify-sign/node_modules/inherits/package.json\\nnode_modules/browserify-sign/node_modules/isarray/package.json\\nnode_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/browserify-sign/node_modules/readable-stream/package.json\\nnode_modules/browserify-sign/node_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/browserify-sign/node_modules/string_decoder/package.json\\nnode_modules/browserify-sign/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/browserify/package.json\\nnode_modules/browserify/test/pkg_event/package.json\\nnode_modules/buffer-xor/package.json\\nnode_modules/buffer/node_modules/isarray/package.json\\nnode_modules/buffer/package.json\\nnode_modules/builtins/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chalk/package.json\\nnode_modules/cipher-base/node_modules/inherits/package.json\\nnode_modules/cipher-base/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/combine-source-map/node_modules/convert-source-map/package.json\\nnode_modules/combine-source-map/node_modules/source-map/package.json\\nnode_modules/combine-source-map/package.json\\nnode_modules/commander/package.json\\nnode_modules/commondir/package.json\\nnode_modules/commoner/node_modules/glob/package.json\\nnode_modules/commoner/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/constants-browserify/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-js/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/create-ecdh/node_modules/bn.js/package.json\\nnode_modules/create-ecdh/package.json\\nnode_modules/create-hash/package.json\\nnode_modules/create-hmac/package.json\\nnode_modules/crypto-browserify/node_modules/inherits/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/d/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/defined/package.json\\nnode_modules/deps-sort/node_modules/JSONStream/package.json\\nnode_modules/deps-sort/node_modules/jsonparse/package.json\\nnode_modules/deps-sort/package.json\\nnode_modules/derequire/node_modules/acorn/package.json\\nnode_modules/derequire/node_modules/inherits/package.json\\nnode_modules/derequire/node_modules/isarray/package.json\\nnode_modules/derequire/node_modules/readable-stream/package.json\\nnode_modules/derequire/node_modules/safe-buffer/package.json\\nnode_modules/derequire/node_modules/string_decoder/package.json\\nnode_modules/derequire/node_modules/through2/package.json\\nnode_modules/derequire/node_modules/xtend/package.json\\nnode_modules/derequire/package.json\\nnode_modules/des.js/package.json\\nnode_modules/detect-indent/package.json\\nnode_modules/detective/node_modules/acorn/package.json\\nnode_modules/detective/node_modules/defined/package.json\\nnode_modules/detective/package.json\\nnode_modules/diffie-hellman/node_modules/bn.js/package.json\\nnode_modules/diffie-hellman/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/elliptic/node_modules/bn.js/package.json\\nnode_modules/elliptic/node_modules/inherits/package.json\\nnode_modules/elliptic/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/es5-ext/package.json\\nnode_modules/es6-iterator/package.json\\nnode_modules/es6-map/package.json\\nnode_modules/es6-set/package.json\\nnode_modules/es6-symbol/package.json\\nnode_modules/es6-weak-map/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/escope/node_modules/estraverse/package.json\\nnode_modules/escope/package.json\\nnode_modules/esniff/package.json\\nnode_modules/esprima-fb/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esrecurse/node_modules/estraverse/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/event-emitter/package.json\\nnode_modules/events/package.json\\nnode_modules/evp_bytestokey/package.json\\nnode_modules/ext/package.json\\nnode_modules/find-up/package.json\\nnode_modules/for-each/package.json\\nnode_modules/fs-readdir-recursive/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/functions-have-names/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/get-stdin/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/gopd/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/has-ansi/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/has/package.json\\nnode_modules/hash-base/node_modules/inherits/package.json\\nnode_modules/hash-base/package.json\\nnode_modules/hash.js/node_modules/inherits/package.json\\nnode_modules/hash.js/package.json\\nnode_modules/hasown/package.json\\nnode_modules/hmac-drbg/package.json\\nnode_modules/http-browserify/package.json\\nnode_modules/https-browserify/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/indexof/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inline-source-map/node_modules/source-map/package.json\\nnode_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/JSONStream/package.json\\nnode_modules/insert-module-globals/node_modules/combine-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/convert-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/jsonparse/package.json\\nnode_modules/insert-module-globals/node_modules/process/package.json\\nnode_modules/insert-module-globals/node_modules/xtend/package.json\\nnode_modules/insert-module-globals/package.json\\nnode_modules/is-arguments/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-date-object/package.json\\nnode_modules/is-finite/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-integer/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/isarray/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json-stable-stringify/package.json\\nnode_modules/jsonify/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/labeled-stream-splicer/package.json\\nnode_modules/left-pad/package.json\\nnode_modules/leven/package.json\\nnode_modules/lexical-scope/package.json\\nnode_modules/line-numbers/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.memoize/package.json\\nnode_modules/lodash/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/md5.js/package.json\\nnode_modules/miller-rabin/node_modules/bn.js/package.json\\nnode_modules/miller-rabin/package.json\\nnode_modules/minimalistic-assert/package.json\\nnode_modules/minimalistic-crypto-utils/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/module-deps/node_modules/JSONStream/package.json\\nnode_modules/module-deps/node_modules/defined/package.json\\nnode_modules/module-deps/node_modules/jsonparse/package.json\\nnode_modules/module-deps/node_modules/object-keys/package.json\\nnode_modules/module-deps/node_modules/readable-stream/package.json\\nnode_modules/module-deps/node_modules/through2/node_modules/xtend/package.json\\nnode_modules/module-deps/node_modules/through2/package.json\\nnode_modules/module-deps/node_modules/xtend/package.json\\nnode_modules/module-deps/package.json\\nnode_modules/ms/package.json\\nnode_modules/next-tick/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/object-is/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/once/package.json\\nnode_modules/os-browserify/package.json\\nnode_modules/output-file-sync/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-try/package.json\\nnode_modules/pako/package.json\\nnode_modules/parents/package.json\\nnode_modules/parse-asn1/package.json\\nnode_modules/path-browserify/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-platform/package.json\\nnode_modules/pbkdf2/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/private/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process/package.json\\nnode_modules/public-encrypt/node_modules/bn.js/package.json\\nnode_modules/public-encrypt/package.json\\nnode_modules/punycode/package.json\\nnode_modules/q/package.json\\nnode_modules/querystring-es3/package.json\\nnode_modules/querystring/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/randomfill/package.json\\nnode_modules/read-only-stream/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readable-wrap/package.json\\nnode_modules/recast/node_modules/ast-types/package.json\\nnode_modules/recast/node_modules/source-map/package.json\\nnode_modules/recast/package.json\\nnode_modules/regenerate/package.json\\nnode_modules/regenerator-babel/node_modules/through/package.json\\nnode_modules/regenerator-babel/package.json\\nnode_modules/regexp.prototype.flags/package.json\\nnode_modules/regexpu/node_modules/ast-types/package.json\\nnode_modules/regexpu/node_modules/esprima/package.json\\nnode_modules/regexpu/node_modules/recast/package.json\\nnode_modules/regexpu/node_modules/source-map/package.json\\nnode_modules/regexpu/package.json\\nnode_modules/regjsgen/package.json\\nnode_modules/regjsparser/package.json\\nnode_modules/repeating/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/require-main-filename/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json\\nnode_modules/ripemd160/node_modules/hash-base/package.json\\nnode_modules/ripemd160/node_modules/inherits/package.json\\nnode_modules/ripemd160/node_modules/isarray/package.json\\nnode_modules/ripemd160/node_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/ripemd160/node_modules/readable-stream/package.json\\nnode_modules/ripemd160/node_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/ripemd160/node_modules/string_decoder/package.json\\nnode_modules/ripemd160/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/set-blocking/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/set-function-name/package.json\\nnode_modules/sha.js/node_modules/inherits/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shallow-copy/package.json\\nnode_modules/shasum/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/slash/package.json\\nnode_modules/source-map-support/node_modules/source-map/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/source-map/package.json\\nnode_modules/stream-browserify/package.json\\nnode_modules/stream-combiner2/node_modules/readable-stream/package.json\\nnode_modules/stream-combiner2/node_modules/through2/package.json\\nnode_modules/stream-combiner2/package.json\\nnode_modules/stream-splicer/package.json\\nnode_modules/string-width/node_modules/ansi-regex/package.json\\nnode_modules/string-width/node_modules/strip-ansi/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/subarg/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/syntax-error/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/node_modules/xtend/package.json\\nnode_modules/through2/package.json\\nnode_modules/timers-browserify/node_modules/process/package.json\\nnode_modules/timers-browserify/package.json\\nnode_modules/to-buffer/node_modules/isarray/package.json\\nnode_modules/to-buffer/package.json\\nnode_modules/to-fast-properties/package.json\\nnode_modules/trim-right/package.json\\nnode_modules/tty-browserify/package.json\\nnode_modules/type/package.json\\nnode_modules/typed-array-buffer/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/umd/package.json\\nnode_modules/unicode-7.0.0/package.json\\nnode_modules/url/node_modules/punycode/package.json\\nnode_modules/url/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/util/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/which-module/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/xtend/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/package.json" } ] }, "components": [ { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "18.1.3", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@18.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@18.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "15.4.1", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@15.4.1", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@15.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "4.0.3", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "3.0.0", "description": "extend like a boss", "scope": "optional", "purl": "pkg:npm/xtend@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "6.2.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@6.2.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "which-typed-array", "version": "1.1.24", "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-typed-array@1.1.24", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/which-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/which-typed-array@1.1.24", "properties": [ { "name": "SrcFile", "value": "node_modules/which-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-typed-array/package.json" } ], "concludedValue": "node_modules/which-typed-array/package.json" } ] } }, { "authors": [ { "name": "nexdrew" } ], "group": "", "name": "which-module", "version": "2.0.1", "description": "Find the module object for something that was require()d", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-module@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nexdrew/which-module#readme" }, { "type": "vcs", "url": "git+https://github.com/nexdrew/which-module.git" } ], "type": "library", "bom-ref": "pkg:npm/which-module@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-module/package.json" } ], "concludedValue": "node_modules/which-module/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "vm-browserify", "version": "0.0.4", "description": "vm module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vm-browserify@0.0.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/vm-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/vm-browserify@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/vm-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vm-browserify/package.json" } ], "concludedValue": "node_modules/vm-browserify/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Joyent (http://www.joyent.com)" } ], "group": "", "name": "util", "version": "0.10.3", "description": "Node.JS util module", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.10.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-util" }, { "type": "vcs", "url": "git://github.com/defunctzombie/node-util" } ], "type": "library", "bom-ref": "pkg:npm/util@0.10.3", "properties": [ { "name": "SrcFile", "value": "node_modules/util/package.json" }, { "name": "ImportedModules", "value": "util,deprecate,util/deprecate" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/package.json" } ], "concludedValue": "node_modules/util/package.json" } ], "occurrences": [ { "location": "src/location.js", "line": 3 } ] } }, { "group": "", "name": "url", "version": "0.10.3", "description": "The core `url` packaged standalone for use with Browserify.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url@0.10.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-url.git" } ], "type": "library", "bom-ref": "pkg:npm/url@0.10.3", "properties": [ { "name": "SrcFile", "value": "node_modules/url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/package.json" } ], "concludedValue": "node_modules/url/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.3.2", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@1.3.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/url/node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/node_modules/punycode/package.json" } ], "concludedValue": "node_modules/url/node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (http://mathiasbynens.be/)" } ], "group": "", "name": "unicode-7.0.0", "version": "0.1.5", "description": "JavaScript-compatible Unicode data. Arrays of code points, arrays of symbols, and regular expressions for Unicode v7.0.0’s categories, scripts, blocks, bidi, and other properties.", "scope": "optional", "purl": "pkg:npm/unicode-7.0.0@0.1.5", "externalReferences": [ { "type": "website", "url": "http://mths.be/node-unicode-data" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/node-unicode-data.git" } ], "type": "library", "bom-ref": "pkg:npm/unicode-7.0.0@0.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-7.0.0/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-7.0.0/package.json" } ], "concludedValue": "node_modules/unicode-7.0.0/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "umd", "version": "3.0.1", "description": "Universal Module Definition for use in automated build systems", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/umd@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/umd.git" } ], "type": "library", "bom-ref": "pkg:npm/umd@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/umd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/umd/package.json" } ], "concludedValue": "node_modules/umd/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "typedarray", "version": "0.0.7", "description": "TypedArray polyfill for old browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedarray@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/typedarray" }, { "type": "vcs", "url": "git://github.com/es-shims/typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/typedarray@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typedarray/package.json" } ], "concludedValue": "node_modules/typedarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-buffer", "version": "1.0.3", "description": "Get the ArrayBuffer out of a TypedArray, robustly.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-buffer@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-buffer@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-buffer/package.json" } ], "concludedValue": "node_modules/typed-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (https://www.medikoo.com/)" } ], "group": "", "name": "type", "version": "2.7.3", "description": "Runtime validation and processing of JavaScript types", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type@2.7.3", "type": "library", "bom-ref": "pkg:npm/type@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type/package.json" } ], "concludedValue": "node_modules/type/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tty-browserify", "version": "0.0.1", "description": "the tty module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tty-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/tty-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/tty-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/tty-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tty-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tty-browserify/package.json" } ], "concludedValue": "node_modules/tty-browserify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "trim-right", "version": "1.0.1", "description": "Similar to String#trim() but removes only whitespace on the right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/trim-right@1.0.1", "type": "library", "bom-ref": "pkg:npm/trim-right@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/trim-right/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/trim-right/package.json" } ], "concludedValue": "node_modules/trim-right/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "to-fast-properties", "version": "1.0.3", "description": "Force V8 to use fast properties for an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-fast-properties@1.0.3", "type": "library", "bom-ref": "pkg:npm/to-fast-properties@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/to-fast-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-fast-properties/package.json" } ], "concludedValue": "node_modules/to-fast-properties/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "to-buffer", "version": "1.2.2", "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-buffer@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/to-buffer" }, { "type": "vcs", "url": "https://github.com/browserify/to-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/to-buffer@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/to-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-buffer/package.json" } ], "concludedValue": "node_modules/to-buffer/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "2.0.5", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/to-buffer/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-buffer/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/to-buffer/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "J. Ryan Stinnett (http://convolv.es/)" } ], "group": "", "name": "timers-browserify", "version": "1.4.2", "description": "timers module for browserify", "scope": "optional", "purl": "pkg:npm/timers-browserify@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jryans/timers-browserify" }, { "type": "vcs", "url": "git://github.com/jryans/timers-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/timers-browserify@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/timers-browserify/package.json" } ], "concludedValue": "node_modules/timers-browserify/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.11.10", "description": "process information for node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process@0.11.10", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.11.10", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-browserify/node_modules/process/package.json" }, { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/process/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/node_modules/process/package.json" } ], "concludedValue": "node_modules/insert-module-globals/node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "1.1.1", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/node_modules/xtend/package.json" }, { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/xtend/package.json" }, { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/xtend/package.json" }, { "name": "SrcFile", "value": "node_modules/derequire/node_modules/xtend/package.json" }, { "name": "SrcFile", "value": "node_modules/acorn-node/node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-node/node_modules/xtend/package.json" } ], "concludedValue": "node_modules/acorn-node/node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.4", "description": "simplified stream contsruction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/through" }, { "type": "vcs", "url": "https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through/package.json" } ], "concludedValue": "node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "syntax-error", "version": "1.4.0", "description": "detect and report syntax errors in source code strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/syntax-error@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-syntax-error" }, { "type": "vcs", "url": "git://github.com/substack/node-syntax-error.git" } ], "type": "library", "bom-ref": "pkg:npm/syntax-error@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/syntax-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/syntax-error/package.json" } ], "concludedValue": "node_modules/syntax-error/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "2.0.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@2.0.0", "type": "library", "bom-ref": "pkg:npm/supports-color@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "subarg", "version": "1.0.0", "description": "parse arguments with recursive contexts", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/subarg@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/subarg" }, { "type": "vcs", "url": "git://github.com/substack/subarg.git" } ], "type": "library", "bom-ref": "pkg:npm/subarg@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/subarg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/subarg/package.json" } ], "concludedValue": "node_modules/subarg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "3.0.1", "description": "Strip ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@3.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "0.10.31", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-splicer", "version": "1.3.2", "description": "streaming pipeline with a mutable configuration", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-splicer@1.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-splicer" }, { "type": "vcs", "url": "git://github.com/substack/stream-splicer.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-splicer@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-splicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-splicer/package.json" } ], "concludedValue": "node_modules/stream-splicer/package.json" } ] } }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "stream-combiner2", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-combiner2@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-combiner2" }, { "type": "vcs", "url": "git://github.com/substack/stream-combiner2.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner2@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-combiner2/package.json" } ], "concludedValue": "node_modules/stream-combiner2/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "0.5.1", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner2/node_modules/through2/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/through2/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.0.34", "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.0.34", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.0.34", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner2/node_modules/readable-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/readable-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-browserify", "version": "1.0.0", "description": "the stream module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-browserify@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-browserify" }, { "type": "vcs", "url": "git://github.com/substack/stream-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-browserify@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-browserify/package.json" } ], "concludedValue": "node_modules/stream-browserify/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "source-map-support", "version": "0.2.10", "description": "Fixes stack traces for files with source maps", "scope": "optional", "purl": "pkg:npm/source-map-support@0.2.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.2.10", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.1.32", "description": "Generates and consumes source maps", "scope": "optional", "purl": "pkg:npm/source-map@0.1.32", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.1.32", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map-support/node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.4.4", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "slash", "version": "1.0.0", "description": "Convert Windows backslash paths to slash paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@1.0.0", "type": "library", "bom-ref": "pkg:npm/slash@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slash/package.json" } ], "concludedValue": "node_modules/slash/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shell-quote", "version": "0.0.1", "description": "quote and parse shell commands", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shell-quote@0.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-shell-quote.git" } ], "type": "library", "bom-ref": "pkg:npm/shell-quote@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/shell-quote/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shell-quote/package.json" } ], "concludedValue": "node_modules/shell-quote/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "1.0.0", "description": "Regular expression for matching a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@1.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "shasum", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shasum@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/shasum" }, { "type": "vcs", "url": "git://github.com/dominictarr/shasum.git" } ], "type": "library", "bom-ref": "pkg:npm/shasum@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/shasum/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shasum/package.json" } ], "concludedValue": "node_modules/shasum/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shallow-copy", "version": "0.0.1", "description": "make a shallow copy of an object or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shallow-copy@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/shallow-copy" }, { "type": "vcs", "url": "git://github.com/substack/shallow-copy.git" } ], "type": "library", "bom-ref": "pkg:npm/shallow-copy@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/shallow-copy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shallow-copy/package.json" } ], "concludedValue": "node_modules/shallow-copy/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "sha.js", "version": "2.4.12", "description": "Streamable SHA hashes in pure javascript", "scope": "optional", "licenses": [ { "expression": "MIT AND BSD-3-Clause" } ], "purl": "pkg:npm/sha.js@2.4.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/sha.js" }, { "type": "vcs", "url": "git://github.com/crypto-browserify/sha.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sha.js@2.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/package.json" } ], "concludedValue": "node_modules/sha.js/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/hash.js/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/hash-base/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/elliptic/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/derequire/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/crypto-browserify/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/cipher-base/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/browserify-sign/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-sign/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/browserify-sign/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-name", "version": "2.0.2", "description": "Set a function's name property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-name@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-name#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-name.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-name@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-name/package.json" } ], "concludedValue": "node_modules/set-function-name/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-length", "version": "1.2.2", "description": "Set a function's length property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-length@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-length#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-length.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-length@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-length/package.json" } ], "concludedValue": "node_modules/set-function-length/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "set-blocking", "version": "2.0.0", "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-blocking@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/set-blocking#readme" }, { "type": "vcs", "url": "git+https://github.com/yargs/set-blocking.git" } ], "type": "library", "bom-ref": "pkg:npm/set-blocking@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-blocking/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-blocking/package.json" } ], "concludedValue": "node_modules/set-blocking/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "group": "", "name": "ripemd160", "version": "2.0.3", "description": "Compute ripemd160 of bytes or strings.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ripemd160@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/ripemd160" } ], "type": "library", "bom-ref": "pkg:npm/ripemd160@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/package.json" } ], "concludedValue": "node_modules/ripemd160/package.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/string_decoder/package.json" }, { "name": "SrcFile", "value": "node_modules/derequire/node_modules/string_decoder/package.json" }, { "name": "SrcFile", "value": "node_modules/browserify-sign/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-sign/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/browserify-sign/node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/string_decoder/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/readable-stream/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/derequire/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/browserify-sign/node_modules/string_decoder/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/readable-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/derequire/node_modules/readable-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/browserify-sign/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-sign/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/browserify-sign/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/derequire/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/buffer/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/browserify-sign/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-sign/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/browserify-sign/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "hash-base", "version": "3.1.2", "description": "abstract base class for hash-streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hash-base@3.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base.git" } ], "type": "library", "bom-ref": "pkg:npm/hash-base@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/hash-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/node_modules/hash-base/package.json" } ], "concludedValue": "node_modules/ripemd160/node_modules/hash-base/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.1.6", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.1.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "group": "", "name": "deep", "version": "1.2.3", "scope": "optional", "purl": "pkg:npm/deep@1.2.3", "type": "library", "bom-ref": "pkg:npm/deep@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ], "concludedValue": "node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "require-main-filename", "version": "2.0.0", "description": "shim for require.main.filename() that works in as many environments as possible", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-main-filename@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/require-main-filename#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/require-main-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/require-main-filename@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/require-main-filename/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-main-filename/package.json" } ], "concludedValue": "node_modules/require-main-filename/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "repeating", "version": "1.1.3", "description": "Repeat a string - fast", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/repeating@1.1.3", "type": "library", "bom-ref": "pkg:npm/repeating@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/repeating/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/repeating/package.json" } ], "concludedValue": "node_modules/repeating/package.json" } ] } }, { "authors": [ { "name": "'Julian Viereck' " } ], "group": "", "name": "regjsparser", "version": "0.1.5", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regjsparser@0.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jviereck/regjsparser" } ], "type": "library", "bom-ref": "pkg:npm/regjsparser@0.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/regjsparser/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regjsparser/package.json" } ], "concludedValue": "node_modules/regjsparser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Benjamin Tan (https://d10.github.io/)" } ], "group": "", "name": "regjsgen", "version": "0.2.0", "description": "Generate `RegExp`s from RegJSParser’s AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regjsgen@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/d10/regjsgen" } ], "type": "library", "bom-ref": "pkg:npm/regjsgen@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/regjsgen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regjsgen/package.json" } ], "concludedValue": "node_modules/regjsgen/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "regexpu", "version": "1.3.0", "description": "A source code transpiler that enables the use of ES6 Unicode regular expressions in ES5.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexpu@1.3.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/regexpu" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/regexpu.git" } ], "type": "library", "bom-ref": "pkg:npm/regexpu@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpu/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpu/package.json" } ], "concludedValue": "node_modules/regexpu/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpu/node_modules/source-map/package.json" }, { "name": "SrcFile", "value": "node_modules/recast/node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/recast/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/recast/node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "recast", "version": "0.10.43", "description": "JavaScript syntax tree transformer, nondestructive pretty-printer, and automatic source map generator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/recast@0.10.43", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/recast" }, { "type": "vcs", "url": "git://github.com/benjamn/recast.git" } ], "type": "library", "bom-ref": "pkg:npm/recast@0.10.43", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpu/node_modules/recast/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpu/node_modules/recast/package.json" } ], "concludedValue": "node_modules/regexpu/node_modules/recast/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "2.7.3", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@2.7.3", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpu/node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpu/node_modules/esprima/package.json" } ], "concludedValue": "node_modules/regexpu/node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "ast-types", "version": "0.8.15", "description": "Esprima-compatible implementation of the Mozilla JS Parser API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ast-types@0.8.15", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/ast-types" }, { "type": "vcs", "url": "git://github.com/benjamn/ast-types.git" } ], "type": "library", "bom-ref": "pkg:npm/ast-types@0.8.15", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpu/node_modules/ast-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpu/node_modules/ast-types/package.json" } ], "concludedValue": "node_modules/regexpu/node_modules/ast-types/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "regexp.prototype.flags", "version": "1.5.4", "description": "ES6 spec-compliant RegExp.prototype.flags shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexp.prototype.flags@1.5.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/RegExp.prototype.flags.git" } ], "type": "library", "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/regexp.prototype.flags/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexp.prototype.flags/package.json" } ], "concludedValue": "node_modules/regexp.prototype.flags/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "regenerator-babel", "version": "0.8.13-2", "description": "Source transformer enabling ECMAScript 6 generator functions (yield) in JavaScript-of-today (ES5)", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regenerator-babel@0.8.13-2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/facebook/regenerator" }, { "type": "vcs", "url": "git://github.com/facebook/regenerator.git" } ], "type": "library", "bom-ref": "pkg:npm/regenerator-babel@0.8.13-2", "properties": [ { "name": "SrcFile", "value": "node_modules/regenerator-babel/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regenerator-babel/package.json" } ], "concludedValue": "node_modules/regenerator-babel/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/regenerator-babel/node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regenerator-babel/node_modules/through/package.json" } ], "concludedValue": "node_modules/regenerator-babel/node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "regenerate", "version": "1.5.0", "description": "Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regenerate@1.5.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/regenerate" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/regenerate.git" } ], "type": "library", "bom-ref": "pkg:npm/regenerate@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/regenerate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regenerate/package.json" } ], "concludedValue": "node_modules/regenerate/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "recast", "version": "0.11.23", "description": "JavaScript syntax tree transformer, nondestructive pretty-printer, and automatic source map generator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/recast@0.11.23", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/recast" }, { "type": "vcs", "url": "git://github.com/benjamn/recast.git" } ], "type": "library", "bom-ref": "pkg:npm/recast@0.11.23", "properties": [ { "name": "SrcFile", "value": "node_modules/recast/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/recast/package.json" } ], "concludedValue": "node_modules/recast/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "ast-types", "version": "0.9.6", "description": "Esprima-compatible implementation of the Mozilla JS Parser API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ast-types@0.9.6", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/ast-types" }, { "type": "vcs", "url": "git://github.com/benjamn/ast-types.git" } ], "type": "library", "bom-ref": "pkg:npm/ast-types@0.9.6", "properties": [ { "name": "SrcFile", "value": "node_modules/recast/node_modules/ast-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/recast/node_modules/ast-types/package.json" } ], "concludedValue": "node_modules/recast/node_modules/ast-types/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "readable-wrap", "version": "1.0.0", "description": "upgrade streams1 to streams2 streams as a standalone module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-wrap@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/readable-wrap" }, { "type": "vcs", "url": "git://github.com/substack/readable-wrap.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-wrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-wrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-wrap/package.json" } ], "concludedValue": "node_modules/readable-wrap/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.1.14", "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "read-only-stream", "version": "1.1.1", "description": "wrap a readable/writable stream to be read-only", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-only-stream@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/read-only-stream" }, { "type": "vcs", "url": "git://github.com/substack/read-only-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/read-only-stream@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/read-only-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-only-stream/package.json" } ], "concludedValue": "node_modules/read-only-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "randomfill", "version": "1.0.4", "description": "random fill from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randomfill@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randomfill" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/randomfill.git" } ], "type": "library", "bom-ref": "pkg:npm/randomfill@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/randomfill/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randomfill/package.json" } ], "concludedValue": "node_modules/randomfill/package.json" } ] } }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring-es3", "version": "0.2.1", "description": "Node's querystring module for all engines. (ES3 compat fork)", "scope": "optional", "purl": "pkg:npm/querystring-es3@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/mike-spainhower/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring-es3@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring-es3/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring-es3/package.json" } ], "concludedValue": "node_modules/querystring-es3/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring", "version": "0.2.0", "description": "Node's querystring module for all engines.", "scope": "optional", "purl": "pkg:npm/querystring@0.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/Gozala/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring/package.json" } ], "concludedValue": "node_modules/querystring/package.json" } ] } }, { "authors": [ { "name": "Kris Kowal (https://github.com/kriskowal)" } ], "group": "", "name": "q", "version": "1.5.1", "description": "A library for promises (CommonJS/Promises/A,B,D)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/q@1.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriskowal/q" }, { "type": "vcs", "url": "git://github.com/kriskowal/q.git" } ], "type": "library", "bom-ref": "pkg:npm/q@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/q/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/q/package.json" } ], "concludedValue": "node_modules/q/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (http://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.2.4", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "purl": "pkg:npm/punycode@1.2.4", "externalReferences": [ { "type": "website", "url": "http://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "public-encrypt", "version": "4.0.3", "description": "browserify version of publicEncrypt & privateDecrypt", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/public-encrypt@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/publicEncrypt" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/publicEncrypt.git" } ], "type": "library", "bom-ref": "pkg:npm/public-encrypt@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/public-encrypt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/public-encrypt/package.json" } ], "concludedValue": "node_modules/public-encrypt/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "bn.js", "version": "4.12.5", "description": "Big number implementation in pure javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bn.js@4.12.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/bn.js" } ], "type": "library", "bom-ref": "pkg:npm/bn.js@4.12.5", "properties": [ { "name": "SrcFile", "value": "node_modules/public-encrypt/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/miller-rabin/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/elliptic/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/diffie-hellman/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/create-ecdh/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/asn1.js/node_modules/bn.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1.js/node_modules/bn.js/package.json" } ], "concludedValue": "node_modules/asn1.js/node_modules/bn.js/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.10.1", "description": "process information for node.js and browsers", "scope": "optional", "purl": "pkg:npm/process@0.10.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.10.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process/package.json" } ], "concludedValue": "node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "private", "version": "0.1.8", "description": "Utility for associating truly private state with any JavaScript object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/private@0.1.8", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/private" }, { "type": "vcs", "url": "git://github.com/benjamn/private.git" } ], "type": "library", "bom-ref": "pkg:npm/private@0.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/private/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/private/package.json" } ], "concludedValue": "node_modules/private/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "possible-typed-array-names", "version": "1.1.0", "description": "A simple list of possible Typed Array names.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/possible-typed-array-names@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/possible-typed-array-names#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/possible-typed-array-names.git" } ], "type": "library", "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/possible-typed-array-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/possible-typed-array-names/package.json" } ], "concludedValue": "node_modules/possible-typed-array-names/package.json" } ] } }, { "authors": [ { "name": "Daniel Cousens" } ], "group": "", "name": "pbkdf2", "version": "3.1.7", "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pbkdf2@3.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/pbkdf2" }, { "type": "vcs", "url": "https://github.com/browserify/pbkdf2.git" } ], "type": "library", "bom-ref": "pkg:npm/pbkdf2@3.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/pbkdf2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pbkdf2/package.json" } ], "concludedValue": "node_modules/pbkdf2/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Timothy J Fontaine (http://atxconsulting.com)" } ], "group": "", "name": "path-platform", "version": "0.11.15", "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-platform@0.11.15", "externalReferences": [ { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform" }, { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform.git" } ], "type": "library", "bom-ref": "pkg:npm/path-platform@0.11.15", "properties": [ { "name": "SrcFile", "value": "node_modules/path-platform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-platform/package.json" } ], "concludedValue": "node_modules/path-platform/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "path-browserify", "version": "0.0.1", "description": "the path module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/path-browserify" }, { "type": "vcs", "url": "git://github.com/substack/path-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/path-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-browserify/package.json" } ], "concludedValue": "node_modules/path-browserify/package.json" } ] } }, { "group": "", "name": "parse-asn1", "version": "5.1.9", "description": "utility library for parsing asn1 files for use with browserify-sign.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-asn1@5.1.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/crypto-browserify/parse-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-asn1@5.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-asn1/package.json" } ], "concludedValue": "node_modules/parse-asn1/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "parents", "version": "1.0.1", "description": "return all the parent directories for a directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parents@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-parents" }, { "type": "vcs", "url": "git://github.com/substack/node-parents.git" } ], "type": "library", "bom-ref": "pkg:npm/parents@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parents/package.json" } ], "concludedValue": "node_modules/parents/package.json" } ] } }, { "group": "", "name": "pako", "version": "0.2.9", "description": "zlib port to javascript - fast, modularized, with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pako@0.2.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/pako" } ], "type": "library", "bom-ref": "pkg:npm/pako@0.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/pako/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pako/package.json" } ], "concludedValue": "node_modules/pako/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "2.2.0", "description": "`Start a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@2.2.0", "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "4.1.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@4.1.0", "type": "library", "bom-ref": "pkg:npm/p-locate@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "2.3.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@2.3.0", "type": "library", "bom-ref": "pkg:npm/p-limit@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "output-file-sync", "version": "1.1.2", "description": "Synchronously write a file and create its ancestor directories if needed", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/output-file-sync@1.1.2", "type": "library", "bom-ref": "pkg:npm/output-file-sync@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/output-file-sync/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/output-file-sync/package.json" } ], "concludedValue": "node_modules/output-file-sync/package.json" } ] } }, { "authors": [ { "name": "Drew Young" } ], "group": "", "name": "os-browserify", "version": "0.1.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-browserify@0.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/drewyoung1/os-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/os-browserify@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-browserify/package.json" } ], "concludedValue": "node_modules/os-browserify/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "object-keys", "version": "1.1.1", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object-is", "version": "1.1.6", "description": "ES2015-compliant shim for Object.is - differentiates between -0 and +0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-is@1.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/object-is" }, { "type": "vcs", "url": "git://github.com/es-shims/object-is.git" } ], "type": "library", "bom-ref": "pkg:npm/object-is@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/object-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-is/package.json" } ], "concludedValue": "node_modules/object-is/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "object-assign", "version": "4.1.1", "description": "ES2015 `Object.assign()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-assign@4.1.1", "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-assign/package.json" } ], "concludedValue": "node_modules/object-assign/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "next-tick", "version": "1.1.0", "description": "Environment agnostic nextTick polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/next-tick@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/next-tick.git" } ], "type": "framework", "bom-ref": "pkg:npm/next-tick@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/next-tick/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/next-tick/package.json" } ], "concludedValue": "node_modules/next-tick/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "module-deps", "version": "3.7.13", "description": "walk the dependency graph to generate json output that can be fed into browser-pack", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/module-deps@3.7.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/module-deps" }, { "type": "vcs", "url": "git://github.com/substack/module-deps.git" } ], "type": "library", "bom-ref": "pkg:npm/module-deps@3.7.13", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/package.json" } ], "concludedValue": "node_modules/module-deps/package.json" } ] }, "tags": [ "graph", "json" ] }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "0.4.2", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@0.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@0.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/through2/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "2.1.2", "description": "extend like a boss", "scope": "optional", "purl": "pkg:npm/xtend@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/through2/node_modules/xtend/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/through2/node_modules/xtend/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/through2/node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object-keys", "version": "0.4.0", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/kriskowal/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@0.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "1.3.1", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/jsonparse/package.json" }, { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/jsonparse/package.json" }, { "name": "SrcFile", "value": "node_modules/deps-sort/node_modules/jsonparse/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "defined", "version": "1.0.1", "description": "return the first argument that is `!== undefined`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defined@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/defined" }, { "type": "vcs", "url": "git://github.com/inspect-js/defined.git" } ], "type": "library", "bom-ref": "pkg:npm/defined@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/defined/package.json" }, { "name": "SrcFile", "value": "node_modules/detective/node_modules/defined/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/defined/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/defined/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/defined/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://bit.ly/dominictarr)" } ], "group": "", "name": "JSONStream", "version": "1.3.5", "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", "scope": "optional", "licenses": [ { "expression": "MIT OR Apache-2.0" } ], "purl": "pkg:npm/JSONStream@1.3.5", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/JSONStream" }, { "type": "vcs", "url": "git://github.com/dominictarr/JSONStream.git" } ], "type": "library", "bom-ref": "pkg:npm/JSONStream@1.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/JSONStream/package.json" }, { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/JSONStream/package.json" }, { "name": "SrcFile", "value": "node_modules/deps-sort/node_modules/JSONStream/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/JSONStream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/JSONStream/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/JSONStream/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.6", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "2.0.10", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@2.0.10", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@2.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "minimalistic-crypto-utils", "version": "1.0.1", "description": "Minimalistic tools for JS crypto modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/minimalistic-crypto-utils#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minimalistic-crypto-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimalistic-crypto-utils/package.json" } ], "concludedValue": "node_modules/minimalistic-crypto-utils/package.json" } ] }, "tags": [ "crypto", "tools" ] }, { "group": "", "name": "minimalistic-assert", "version": "1.0.1", "description": "minimalistic-assert ===", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimalistic-assert@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/minimalistic-assert" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/minimalistic-assert.git" } ], "type": "library", "bom-ref": "pkg:npm/minimalistic-assert@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minimalistic-assert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimalistic-assert/package.json" } ], "concludedValue": "node_modules/minimalistic-assert/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "miller-rabin", "version": "4.0.1", "description": "Miller Rabin algorithm for primality test", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/miller-rabin@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/miller-rabin" } ], "type": "library", "bom-ref": "pkg:npm/miller-rabin@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/miller-rabin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/miller-rabin/package.json" } ], "concludedValue": "node_modules/miller-rabin/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "md5.js", "version": "1.3.5", "description": "node style md5 on pure JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/md5.js@1.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/md5.js" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/md5.js.git" } ], "type": "library", "bom-ref": "pkg:npm/md5.js@1.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/md5.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/md5.js/package.json" } ], "concludedValue": "node_modules/md5.js/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "math-intrinsics", "version": "1.1.0", "description": "ES Math-related intrinsics and helpers, robustly cached.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/math-intrinsics#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/math-intrinsics.git" } ], "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/math-intrinsics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/math-intrinsics/package.json" } ], "concludedValue": "node_modules/math-intrinsics/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.memoize", "version": "3.0.4", "description": "The modern build of lodash’s `_.memoize` as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.memoize@3.0.4", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.memoize@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.memoize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.memoize/package.json" } ], "concludedValue": "node_modules/lodash.memoize/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "3.10.1", "description": "The modern build of lodash modular utilities.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@3.10.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash@3.10.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "5.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@5.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "line-numbers", "version": "0.2.0", "description": "Add line numbers to a string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/line-numbers@0.2.0", "type": "library", "bom-ref": "pkg:npm/line-numbers@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/line-numbers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/line-numbers/package.json" } ], "concludedValue": "node_modules/line-numbers/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "lexical-scope", "version": "1.2.0", "description": "detect global and local lexical identifiers from javascript source code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lexical-scope@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/lexical-scope" }, { "type": "vcs", "url": "git://github.com/substack/lexical-scope.git" } ], "type": "library", "bom-ref": "pkg:npm/lexical-scope@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lexical-scope/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lexical-scope/package.json" } ], "concludedValue": "node_modules/lexical-scope/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "leven", "version": "1.0.2", "description": "Measure the difference between two strings using the fastest JS implementation of the Levenshtein distance algorithm", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/leven@1.0.2", "type": "library", "bom-ref": "pkg:npm/leven@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/leven/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/leven/package.json" } ], "concludedValue": "node_modules/leven/package.json" } ] } }, { "authors": [ { "name": "azer" } ], "group": "", "name": "left-pad", "version": "0.0.3", "description": "String left pad", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/left-pad@0.0.3", "type": "library", "bom-ref": "pkg:npm/left-pad@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/left-pad/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/left-pad/package.json" } ], "concludedValue": "node_modules/left-pad/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "labeled-stream-splicer", "version": "1.0.2", "description": "stream splicer with labels", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/labeled-stream-splicer@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/labeled-stream-splicer" }, { "type": "vcs", "url": "git://github.com/substack/labeled-stream-splicer.git" } ], "type": "library", "bom-ref": "pkg:npm/labeled-stream-splicer@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/labeled-stream-splicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/labeled-stream-splicer/package.json" } ], "concludedValue": "node_modules/labeled-stream-splicer/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "0.0.5", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@0.0.5", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Douglas Crockford (https://crockford.com/)" } ], "group": "", "name": "jsonify", "version": "0.0.1", "description": "JSON without touching any globals", "scope": "optional", "licenses": [ { "license": { "name": "Public Domain", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/jsonify.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonify/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonify/package.json" } ], "concludedValue": "node_modules/jsonify/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "json-stable-stringify", "version": "0.0.1", "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stable-stringify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/substack/json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stable-stringify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stable-stringify/package.json" } ], "concludedValue": "node_modules/json-stable-stringify/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Mathias Bynens (http://mathiasbynens.be/)" } ], "group": "", "name": "jsesc", "version": "0.5.0", "description": "A JavaScript library for escaping JavaScript strings while generating the shortest possible valid output.", "scope": "optional", "purl": "pkg:npm/jsesc@0.5.0", "externalReferences": [ { "type": "website", "url": "http://mths.be/jsesc" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/jsesc.git" } ], "type": "library", "bom-ref": "pkg:npm/jsesc@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsesc/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsesc/package.json" } ], "concludedValue": "node_modules/jsesc/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "1.0.0", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@1.0.0", "type": "library", "bom-ref": "pkg:npm/js-tokens@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "0.0.1", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-typed-array", "version": "1.1.15", "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typed-array@1.1.15", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typed-array@1.1.15", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typed-array/package.json" } ], "concludedValue": "node_modules/is-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-regex", "version": "1.2.1", "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regex@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-regex" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regex/package.json" } ], "concludedValue": "node_modules/is-regex/package.json" } ] } }, { "authors": [ { "name": "Parsha Pourkhomami" } ], "group": "", "name": "is-integer", "version": "1.0.7", "description": "ES2015 (ES6) Number.isInteger polyfill", "scope": "optional", "licenses": [ { "expression": "WTFPL OR ISC" } ], "purl": "pkg:npm/is-integer@1.0.7", "type": "library", "bom-ref": "pkg:npm/is-integer@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/is-integer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-integer/package.json" } ], "concludedValue": "node_modules/is-integer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-finite", "version": "1.1.0", "description": "ES2015 Number.isFinite() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-finite@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-finite@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-finite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-finite/package.json" } ], "concludedValue": "node_modules/is-finite/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "is-date-object", "version": "1.1.0", "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-date-object@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-date-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-date-object@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-date-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-date-object/package.json" } ], "concludedValue": "node_modules/is-date-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-callable", "version": "1.2.7", "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-callable@1.2.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-callable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/is-callable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-callable/package.json" } ], "concludedValue": "node_modules/is-callable/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "is-buffer", "version": "1.1.6", "description": "Determine if an object is a Buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-buffer@1.1.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/is-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/is-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-buffer/package.json" } ], "concludedValue": "node_modules/is-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-arguments", "version": "1.2.0", "description": "Is this an arguments object? It's a harder question than you think.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arguments@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-arguments" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-arguments.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arguments@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arguments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arguments/package.json" } ], "concludedValue": "node_modules/is-arguments/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "insert-module-globals", "version": "6.6.3", "description": "insert implicit module globals into a module-deps stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/insert-module-globals@6.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/insert-module-globals" }, { "type": "vcs", "url": "git://github.com/substack/insert-module-globals.git" } ], "type": "library", "bom-ref": "pkg:npm/insert-module-globals@6.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/package.json" } ], "concludedValue": "node_modules/insert-module-globals/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "inline-source-map", "version": "0.5.0", "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inline-source-map@0.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/inline-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/inline-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/inline-source-map@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/inline-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/node_modules/inline-source-map/package.json" } ], "concludedValue": "node_modules/insert-module-globals/node_modules/inline-source-map/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.1.3", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/insert-module-globals/node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "combine-source-map", "version": "0.6.1", "description": "Add source maps of multiple files, offset them and then combine them into one source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combine-source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/combine-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/combine-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/combine-source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/combine-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/node_modules/combine-source-map/package.json" } ], "concludedValue": "node_modules/insert-module-globals/node_modules/combine-source-map/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "inline-source-map", "version": "0.3.1", "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inline-source-map@0.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/inline-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/inline-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/inline-source-map@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inline-source-map/package.json" } ], "concludedValue": "node_modules/inline-source-map/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.3.0", "description": "Generates and consumes source maps", "scope": "optional", "purl": "pkg:npm/source-map@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inline-source-map/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/inline-source-map/node_modules/source-map/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "group": "", "name": "indexof", "version": "0.0.1", "description": "Microsoft sucks", "scope": "optional", "purl": "pkg:npm/indexof@0.0.1", "type": "library", "bom-ref": "pkg:npm/indexof@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/indexof/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indexof/package.json" } ], "concludedValue": "node_modules/indexof/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.2.1", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ieee754@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.4.24", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.4.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "https-browserify", "version": "0.0.1", "description": "https module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/https-browserify" }, { "type": "vcs", "url": "git://github.com/substack/https-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/https-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/https-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-browserify/package.json" } ], "concludedValue": "node_modules/https-browserify/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "http-browserify", "version": "1.7.0", "description": "http module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-browserify@1.7.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/http-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/http-browserify@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-browserify/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-browserify/package.json" } ], "concludedValue": "node_modules/http-browserify/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "hmac-drbg", "version": "1.0.1", "description": "Deterministic random bit generator (hmac)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hmac-drbg@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/hmac-drbg#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/indutny/hmac-drbg.git" } ], "type": "library", "bom-ref": "pkg:npm/hmac-drbg@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/hmac-drbg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hmac-drbg/package.json" } ], "concludedValue": "node_modules/hmac-drbg/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "hash.js", "version": "1.1.7", "description": "Various hash functions that could be run by both browser and node", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hash.js@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/hash.js" } ], "type": "library", "bom-ref": "pkg:npm/hash.js@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/hash.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hash.js/package.json" } ], "concludedValue": "node_modules/hash.js/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "hash-base", "version": "3.0.5", "description": "abstract base class for hash-streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hash-base@3.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base.git" } ], "type": "library", "bom-ref": "pkg:npm/hash-base@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/hash-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hash-base/package.json" } ], "concludedValue": "node_modules/hash-base/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-tostringtag", "version": "1.0.2", "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-tostringtag@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-tostringtag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-tostringtag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-tostringtag@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-tostringtag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-tostringtag/package.json" } ], "concludedValue": "node_modules/has-tostringtag/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-symbols", "version": "1.1.0", "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-symbols@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/has-symbols#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/has-symbols.git" } ], "type": "library", "bom-ref": "pkg:npm/has-symbols@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-symbols/package.json" } ], "concludedValue": "node_modules/has-symbols/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "has-property-descriptors", "version": "1.0.2", "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-property-descriptors@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-property-descriptors#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-property-descriptors.git" } ], "type": "library", "bom-ref": "pkg:npm/has-property-descriptors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-property-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-property-descriptors/package.json" } ], "concludedValue": "node_modules/has-property-descriptors/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-ansi", "version": "2.0.0", "description": "Check if a string has ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-ansi@2.0.0", "type": "library", "bom-ref": "pkg:npm/has-ansi@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-ansi/package.json" } ], "concludedValue": "node_modules/has-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Thiago de Arruda " } ], "group": "", "name": "has", "version": "1.0.4", "description": "Object.prototype.hasOwnProperty.call shortcut", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tarruda/has" }, { "type": "vcs", "url": "git://github.com/tarruda/has.git" } ], "type": "library", "bom-ref": "pkg:npm/has@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/has/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has/package.json" } ], "concludedValue": "node_modules/has/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "gopd", "version": "1.2.0", "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gopd@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/gopd#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/gopd.git" } ], "type": "library", "bom-ref": "pkg:npm/gopd@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gopd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gopd/package.json" } ], "concludedValue": "node_modules/gopd/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "globals", "version": "6.4.1", "description": "Global identifiers from different JavaScript environments", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globals@6.4.1", "type": "library", "bom-ref": "pkg:npm/globals@6.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globals/package.json" } ], "concludedValue": "node_modules/globals/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "4.5.3", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@4.5.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@4.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "get-stdin", "version": "4.0.1", "description": "Easier stdin", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stdin@4.0.1", "type": "library", "bom-ref": "pkg:npm/get-stdin@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stdin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stdin/package.json" } ], "concludedValue": "node_modules/get-stdin/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-proto", "version": "1.0.1", "description": "Robustly get the [[Prototype]] of an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/get-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-proto/package.json" } ], "concludedValue": "node_modules/get-proto/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-intrinsic", "version": "1.3.0", "description": "Get and robustly cache all JS language-level intrinsics at first require time", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-intrinsic@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-intrinsic#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-intrinsic.git" } ], "type": "library", "bom-ref": "pkg:npm/get-intrinsic@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-intrinsic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-intrinsic/package.json" } ], "concludedValue": "node_modules/get-intrinsic/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "functions-have-names", "version": "1.2.3", "description": "Does this JS environment support the `name` property on functions?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/functions-have-names@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/functions-have-names#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/functions-have-names.git" } ], "type": "library", "bom-ref": "pkg:npm/functions-have-names@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/functions-have-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/functions-have-names/package.json" } ], "concludedValue": "node_modules/functions-have-names/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "fs-readdir-recursive", "version": "0.1.2", "description": "Recursively read a directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-readdir-recursive@0.1.2", "type": "library", "bom-ref": "pkg:npm/fs-readdir-recursive@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-readdir-recursive/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-readdir-recursive/package.json" } ], "concludedValue": "node_modules/fs-readdir-recursive/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "for-each", "version": "0.3.5", "description": "A better forEach", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/for-each@0.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/for-each" }, { "type": "vcs", "url": "https://github.com/Raynos/for-each.git" } ], "type": "library", "bom-ref": "pkg:npm/for-each@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/for-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/for-each/package.json" } ], "concludedValue": "node_modules/for-each/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "4.1.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@4.1.0", "type": "library", "bom-ref": "pkg:npm/find-up@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "ext", "version": "1.7.0", "description": "JavaScript utilities with respect to emerging standard", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ext@1.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/medikoo/es5-ext#ext" } ], "type": "library", "bom-ref": "pkg:npm/ext@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ext/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ext/package.json" } ], "concludedValue": "node_modules/ext/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf " } ], "group": "", "name": "evp_bytestokey", "version": "1.0.3", "description": "The insecure key derivation algorithm from OpenSSL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/evp_bytestokey@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/EVP_BytesToKey" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/EVP_BytesToKey.git" } ], "type": "library", "bom-ref": "pkg:npm/evp_bytestokey@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/evp_bytestokey/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/evp_bytestokey/package.json" } ], "concludedValue": "node_modules/evp_bytestokey/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili (http://jeditoolkit.com)" } ], "group": "", "name": "events", "version": "1.0.2", "description": "Node's event emitter for all engines.", "scope": "optional", "purl": "pkg:npm/events@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/Gozala/events.git" } ], "type": "library", "bom-ref": "pkg:npm/events@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/events/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/events/package.json" } ], "concludedValue": "node_modules/events/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "event-emitter", "version": "0.3.5", "description": "Environment agnostic event emitter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/event-emitter@0.3.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/event-emitter.git" } ], "type": "library", "bom-ref": "pkg:npm/event-emitter@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/event-emitter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/event-emitter/package.json" } ], "concludedValue": "node_modules/event-emitter/package.json" } ] }, "tags": [ "event" ] }, { "group": "", "name": "esutils", "version": "1.1.6", "description": "utility box for ECMAScript language tools", "scope": "optional", "purl": "pkg:npm/esutils@1.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Constellation/esutils" }, { "type": "vcs", "url": "http://github.com/Constellation/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.9.3", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "purl": "pkg:npm/estraverse@1.9.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ] } }, { "group": "", "name": "esrecurse", "version": "4.3.0", "description": "ECMAScript AST recursive visitor", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esrecurse@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esrecurse" }, { "type": "vcs", "url": "https://github.com/estools/esrecurse.git" } ], "type": "library", "bom-ref": "pkg:npm/esrecurse@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/esrecurse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esrecurse/package.json" } ], "concludedValue": "node_modules/esrecurse/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "5.3.0", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@5.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/esrecurse/node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esrecurse/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/esrecurse/node_modules/estraverse/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima-fb", "version": "15001.1001.0-dev-harmony-fb", "description": "Facebook-specific fork of the esprima project", "scope": "optional", "purl": "pkg:npm/esprima-fb@15001.1001.0-dev-harmony-fb", "externalReferences": [ { "type": "vcs", "url": "https://github.com/facebook/esprima/tree/fb-harmony" }, { "type": "vcs", "url": "http://github.com/facebook/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima-fb@15001.1001.0-dev-harmony-fb", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima-fb/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima-fb/package.json" } ], "concludedValue": "node_modules/esprima-fb/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "3.1.3", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@3.1.3", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "esniff", "version": "2.0.1", "description": "Low footprint ECMAScript source code parser", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esniff@2.0.1", "type": "library", "bom-ref": "pkg:npm/esniff@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esniff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esniff/package.json" } ], "concludedValue": "node_modules/esniff/package.json" } ] } }, { "group": "", "name": "escope", "version": "3.6.0", "description": "ECMAScript scope analyzer", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escope@3.6.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/estools/escope" }, { "type": "vcs", "url": "https://github.com/estools/escope.git" } ], "type": "library", "bom-ref": "pkg:npm/escope@3.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escope/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escope/package.json" } ], "concludedValue": "node_modules/escope/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "4.3.0", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escope/node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escope/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/escope/node_modules/estraverse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-weak-map", "version": "2.0.3", "description": "ECMAScript6 WeakMap polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-weak-map@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/es6-weak-map.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-weak-map@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-weak-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-weak-map/package.json" } ], "concludedValue": "node_modules/es6-weak-map/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-symbol", "version": "3.1.4", "description": "ECMAScript 6 Symbol polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-symbol@3.1.4", "type": "library", "bom-ref": "pkg:npm/es6-symbol@3.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-symbol/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-symbol/package.json" } ], "concludedValue": "node_modules/es6-symbol/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-set", "version": "0.1.6", "description": "ECMAScript6 Set polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-set@0.1.6", "type": "library", "bom-ref": "pkg:npm/es6-set@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-set/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-set/package.json" } ], "concludedValue": "node_modules/es6-set/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-map", "version": "0.1.5", "description": "ECMAScript6 Map polyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-map@0.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/es6-map.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-map@0.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-map/package.json" } ], "concludedValue": "node_modules/es6-map/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es6-iterator", "version": "2.0.3", "description": "Iterator abstraction based on ES6 specification", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-iterator@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/es6-iterator.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-iterator@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-iterator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-iterator/package.json" } ], "concludedValue": "node_modules/es6-iterator/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es5-ext", "version": "0.10.64", "description": "ECMAScript extensions and shims", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es5-ext@0.10.64", "type": "library", "bom-ref": "pkg:npm/es5-ext@0.10.64", "properties": [ { "name": "SrcFile", "value": "node_modules/es5-ext/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es5-ext/package.json" } ], "concludedValue": "node_modules/es5-ext/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-object-atoms", "version": "1.1.2", "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-object-atoms@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-object-atoms#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-object-atoms.git" } ], "type": "library", "bom-ref": "pkg:npm/es-object-atoms@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/es-object-atoms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-object-atoms/package.json" } ], "concludedValue": "node_modules/es-object-atoms/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-define-property", "version": "1.0.1", "description": "`Object.defineProperty`, but not IE 8's broken one.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-define-property@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-define-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-define-property.git" } ], "type": "library", "bom-ref": "pkg:npm/es-define-property@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es-define-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-define-property/package.json" } ], "concludedValue": "node_modules/es-define-property/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "elliptic", "version": "6.6.1", "description": "EC cryptography", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/elliptic@6.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/elliptic" } ], "type": "library", "bom-ref": "pkg:npm/elliptic@6.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/elliptic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/elliptic/package.json" } ], "concludedValue": "node_modules/elliptic/package.json" } ] } }, { "authors": [ { "name": "Conrad Pankoff (http://www.fknsrs.biz/)" } ], "group": "", "name": "duplexer2", "version": "0.0.2", "description": "Like duplexer (http://npm.im/duplexer) but using streams2", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/duplexer2@0.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/deoxxa/duplexer2.git" } ], "type": "library", "bom-ref": "pkg:npm/duplexer2@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer2/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer2/package.json" } ], "concludedValue": "node_modules/duplexer2/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "dunder-proto", "version": "1.0.1", "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dunder-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/dunder-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/dunder-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/dunder-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dunder-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dunder-proto/package.json" } ], "concludedValue": "node_modules/dunder-proto/package.json" } ] } }, { "authors": [ { "name": "2013+ Bevry Pty Ltd (http://bevry.me)" } ], "group": "", "name": "domain-browser", "version": "1.1.7", "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domain-browser@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bevry/domain-browser" }, { "type": "vcs", "url": "http://github.com/bevry/domain-browser.git" } ], "type": "library", "bom-ref": "pkg:npm/domain-browser@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/domain-browser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domain-browser/package.json" } ], "concludedValue": "node_modules/domain-browser/package.json" } ] }, "tags": [ "api", "web" ] }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "diffie-hellman", "version": "5.0.3", "description": "pure js diffie-hellman", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diffie-hellman@5.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/diffie-hellman" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/diffie-hellman.git" } ], "type": "library", "bom-ref": "pkg:npm/diffie-hellman@5.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/diffie-hellman/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diffie-hellman/package.json" } ], "concludedValue": "node_modules/diffie-hellman/package.json" } ] }, "tags": [ "native" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "detective", "version": "4.7.1", "description": "find all require() calls by walking the AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detective@4.7.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/browserify/detective.git" } ], "type": "library", "bom-ref": "pkg:npm/detective@4.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/detective/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detective/package.json" } ], "concludedValue": "node_modules/detective/package.json" } ] } }, { "group": "", "name": "acorn", "version": "5.7.4", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@5.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@5.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/detective/node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detective/node_modules/acorn/package.json" } ], "concludedValue": "node_modules/detective/node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "detect-indent", "version": "3.0.1", "description": "Detect the indentation of code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-indent@3.0.1", "type": "library", "bom-ref": "pkg:npm/detect-indent@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-indent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-indent/package.json" } ], "concludedValue": "node_modules/detect-indent/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "des.js", "version": "1.1.0", "description": "DES implementation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/des.js@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/des.js#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/indutny/des.js.git" } ], "type": "library", "bom-ref": "pkg:npm/des.js@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/des.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/des.js/package.json" } ], "concludedValue": "node_modules/des.js/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "derequire", "version": "2.1.1", "description": "remove requires", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/derequire@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/derequire" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/derequire.git" } ], "type": "library", "bom-ref": "pkg:npm/derequire@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/derequire/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/derequire/package.json" } ], "concludedValue": "node_modules/derequire/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "2.0.5", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/derequire/node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/derequire/node_modules/through2/package.json" } ], "concludedValue": "node_modules/derequire/node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "group": "", "name": "acorn", "version": "7.4.1", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@7.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@7.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/derequire/node_modules/acorn/package.json" }, { "name": "SrcFile", "value": "node_modules/acorn-node/node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-node/node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn-node/node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deps-sort", "version": "1.3.9", "description": "sort module-deps output for deterministic browserify bundles", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deps-sort@1.3.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/deps-sort" }, { "type": "vcs", "url": "git://github.com/substack/deps-sort.git" } ], "type": "library", "bom-ref": "pkg:npm/deps-sort@1.3.9", "properties": [ { "name": "SrcFile", "value": "node_modules/deps-sort/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deps-sort/package.json" } ], "concludedValue": "node_modules/deps-sort/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "defined", "version": "0.0.0", "description": "return the first argument that is `!== undefined`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defined@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/defined" }, { "type": "vcs", "url": "git://github.com/substack/defined.git" } ], "type": "library", "bom-ref": "pkg:npm/defined@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/defined/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defined/package.json" } ], "concludedValue": "node_modules/defined/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "define-properties", "version": "1.2.1", "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/define-properties@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/define-properties.git" } ], "type": "library", "bom-ref": "pkg:npm/define-properties@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/define-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/define-properties/package.json" } ], "concludedValue": "node_modules/define-properties/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "define-data-property", "version": "1.1.4", "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/define-data-property@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/define-data-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/define-data-property.git" } ], "type": "library", "bom-ref": "pkg:npm/define-data-property@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/define-data-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/define-data-property/package.json" } ], "concludedValue": "node_modules/define-data-property/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "1.1.2", "description": "node's assert.deepEqual algorithm", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@1.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/inspect-js/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/deep-equal/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "d", "version": "1.0.2", "description": "Property descriptor factory", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/d@1.0.2", "type": "library", "bom-ref": "pkg:npm/d@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/d/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/d/package.json" } ], "concludedValue": "node_modules/d/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "crypto-browserify", "version": "3.12.1", "description": "implementation of crypto for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crypto-browserify@3.12.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/crypto-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/crypto-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/crypto-browserify@3.12.1", "properties": [ { "name": "SrcFile", "value": "node_modules/crypto-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypto-browserify/package.json" } ], "concludedValue": "node_modules/crypto-browserify/package.json" } ] }, "tags": [ "crypto" ] }, { "group": "", "name": "create-hmac", "version": "1.1.7", "description": "node style hmacs in the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/create-hmac@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/createHmac" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/createHmac.git" } ], "type": "library", "bom-ref": "pkg:npm/create-hmac@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/create-hmac/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/create-hmac/package.json" } ], "concludedValue": "node_modules/create-hmac/package.json" } ] } }, { "group": "", "name": "create-hash", "version": "1.2.0", "description": "create hashes for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/create-hash@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/createHash" } ], "type": "library", "bom-ref": "pkg:npm/create-hash@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/create-hash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/create-hash/package.json" } ], "concludedValue": "node_modules/create-hash/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "create-ecdh", "version": "4.0.4", "description": "createECDH but browserifiable", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/create-ecdh@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/createECDH" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/createECDH.git" } ], "type": "library", "bom-ref": "pkg:npm/create-ecdh@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/create-ecdh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/create-ecdh/package.json" } ], "concludedValue": "node_modules/create-ecdh/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.3", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "group": "", "name": "core-js", "version": "0.6.1", "description": "Standard library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-js@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zloirock/core-js.git" } ], "type": "library", "bom-ref": "pkg:npm/core-js@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/core-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-js/package.json" } ], "concludedValue": "node_modules/core-js/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "0.5.1", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "constants-browserify", "version": "0.0.1", "description": "node's constants module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/constants-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/constants-browserify" }, { "type": "vcs", "url": "git://github.com/juliangruber/constants-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/constants-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/constants-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/constants-browserify/package.json" } ], "concludedValue": "node_modules/constants-browserify/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "console-browserify", "version": "1.2.0", "description": "Emulate console for all the browsers", "scope": "optional", "purl": "pkg:npm/console-browserify@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/console-browserify" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/console-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/console-browserify/package.json" } ], "concludedValue": "node_modules/console-browserify/package.json" } ] } }, { "authors": [ { "name": "Max Ogden " } ], "group": "", "name": "concat-stream", "version": "1.4.11", "description": "writable stream that concatenates strings or binary data and calls a callback with the result", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-stream@1.4.11", "externalReferences": [ { "type": "vcs", "url": "http://github.com/maxogden/concat-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-stream@1.4.11", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-stream/package.json" } ], "concludedValue": "node_modules/concat-stream/package.json" } ] }, "tags": [ "binary", "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "commoner", "version": "0.10.8", "description": "Flexible tool for translating any dialect of JavaScript into Node-readable CommonJS modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commoner@0.10.8", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/commoner" }, { "type": "vcs", "url": "git://github.com/benjamn/commoner.git" } ], "type": "library", "bom-ref": "pkg:npm/commoner@0.10.8", "properties": [ { "name": "SrcFile", "value": "node_modules/commoner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commoner/package.json" } ], "concludedValue": "node_modules/commoner/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "5.0.15", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@5.0.15", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@5.0.15", "properties": [ { "name": "SrcFile", "value": "node_modules/commoner/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commoner/node_modules/glob/package.json" } ], "concludedValue": "node_modules/commoner/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "commondir", "version": "0.0.1", "description": "Compute the closest common parent for file paths", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commondir@0.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-commondir.git" } ], "type": "library", "bom-ref": "pkg:npm/commondir@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commondir/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commondir/package.json" } ], "concludedValue": "node_modules/commondir/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.3", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "combine-source-map", "version": "0.3.0", "description": "Add source maps of multiple files, offset them and then combine them into one source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combine-source-map@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/combine-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/combine-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/combine-source-map@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/combine-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combine-source-map/package.json" } ], "concludedValue": "node_modules/combine-source-map/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.1.43", "description": "Generates and consumes source maps", "scope": "optional", "purl": "pkg:npm/source-map@0.1.43", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.1.43", "properties": [ { "name": "SrcFile", "value": "node_modules/combine-source-map/node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combine-source-map/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/combine-source-map/node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "0.3.5", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@0.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/combine-source-map/node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combine-source-map/node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/combine-source-map/node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "6.0.0", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@6.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/yargs/cliui.git" } ], "type": "library", "bom-ref": "pkg:npm/cliui@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf " } ], "group": "", "name": "cipher-base", "version": "1.0.7", "description": "abstract base class for crypto-streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cipher-base@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/cipher-base#readme" }, { "type": "vcs", "url": "git+https://github.com/crypto-browserify/cipher-base.git" } ], "type": "library", "bom-ref": "pkg:npm/cipher-base@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/cipher-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cipher-base/package.json" } ], "concludedValue": "node_modules/cipher-base/package.json" } ] } }, { "group": "", "name": "chalk", "version": "1.1.3", "description": "Terminal string styling done right. Much color.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@1.1.3", "type": "library", "bom-ref": "pkg:npm/chalk@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "5.3.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@5.3.1", "type": "library", "bom-ref": "pkg:npm/camelcase@5.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bound", "version": "1.0.4", "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bound@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bound#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bound.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bound@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bound/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bound/package.json" } ], "concludedValue": "node_modules/call-bound/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind-apply-helpers", "version": "1.0.2", "description": "Helper functions around Function call/apply/bind, for use in `call-bind`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind-apply-helpers#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind-apply-helpers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind-apply-helpers/package.json" } ], "concludedValue": "node_modules/call-bind-apply-helpers/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind", "version": "1.0.9", "description": "Robustly `.call.bind()` a function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind@1.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind@1.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind/package.json" } ], "concludedValue": "node_modules/call-bind/package.json" } ] } }, { "group": "", "name": "builtins", "version": "0.0.7", "description": "List of node.js builtin modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/builtins@0.0.7", "type": "library", "bom-ref": "pkg:npm/builtins@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/builtins/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/builtins/package.json" } ], "concludedValue": "node_modules/builtins/package.json" } ] } }, { "authors": [ { "name": "Daniel Cousens" } ], "group": "", "name": "buffer-xor", "version": "1.0.3", "description": "A simple module for bitwise-xor on buffers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer-xor@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/buffer-xor" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/buffer-xor.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer-xor@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer-xor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer-xor/package.json" } ], "concludedValue": "node_modules/buffer-xor/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "buffer", "version": "3.6.2", "description": "Node.js Buffer API, for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer@3.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/buffer" }, { "type": "vcs", "url": "git://github.com/feross/buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer@3.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer/package.json" } ], "concludedValue": "node_modules/buffer/package.json" } ] } }, { "authors": [ { "name": "Devon Govett " } ], "group": "", "name": "browserify-zlib", "version": "0.1.4", "description": "Full zlib module for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-zlib@0.1.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/devongovett/browserify-zlib.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-zlib@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-zlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-zlib/package.json" } ], "concludedValue": "node_modules/browserify-zlib/package.json" } ] } }, { "group": "", "name": "browserify-sign", "version": "4.2.6", "description": "adds node crypto signing for browsers", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-sign@4.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/browserify-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-sign@4.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-sign/package.json" } ], "concludedValue": "node_modules/browserify-sign/package.json" } ] }, "tags": [ "crypto" ] }, { "group": "", "name": "browserify-rsa", "version": "4.1.1", "description": "RSA for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-rsa@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/browserify-rsa.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-rsa@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-rsa/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-rsa/package.json" } ], "concludedValue": "node_modules/browserify-rsa/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf " } ], "group": "", "name": "browserify-des", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-des@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/browserify-des#readme" }, { "type": "vcs", "url": "git+https://github.com/crypto-browserify/browserify-des.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-des@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-des/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-des/package.json" } ], "concludedValue": "node_modules/browserify-des/package.json" } ] } }, { "authors": [ { "name": "Ralf S. Engelschall (http://engelschall.com)" } ], "group": "", "name": "browserify-derequire", "version": "0.9.4", "description": "Browserify Plugin for Renaming require() Calls", "scope": "required", "purl": "pkg:npm/browserify-derequire@0.9.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rse/browserify-derequire" }, { "type": "vcs", "url": "https://github.com/rse/browserify-derequire.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-derequire@0.9.4", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-derequire/package.json" }, { "name": "ImportedModules", "value": "browserify-derequire" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-derequire/package.json" } ], "concludedValue": "node_modules/browserify-derequire/package.json" } ], "occurrences": [ { "location": "bin/build-acorn.js", "line": 10 }, { "location": "bin/build-acorn.js", "line": 36 }, { "location": "bin/build-acorn.js", "line": 45 } ] } }, { "authors": [ { "name": "Calvin Metcalf " } ], "group": "", "name": "browserify-cipher", "version": "1.0.1", "description": "ciphers for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-cipher@1.0.1", "type": "library", "bom-ref": "pkg:npm/browserify-cipher@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-cipher/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-cipher/package.json" } ], "concludedValue": "node_modules/browserify-cipher/package.json" } ] } }, { "group": "", "name": "browserify-aes", "version": "1.2.0", "description": "aes, for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-aes@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/browserify-aes" }, { "type": "vcs", "url": "git://github.com/crypto-browserify/browserify-aes.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-aes@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-aes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-aes/package.json" } ], "concludedValue": "node_modules/browserify-aes/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "browserify", "version": "9.0.8", "description": "browser-side require() the node way", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify@9.0.8", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify@9.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify/package.json" }, { "name": "ImportedModules", "value": "browserify" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify/package.json" } ], "concludedValue": "node_modules/browserify/package.json" } ], "occurrences": [ { "location": "bin/build-acorn.js", "line": 4 } ] } }, { "group": "", "name": "pkg_event", "version": "", "scope": "optional", "purl": "pkg:npm/pkg_event", "type": "library", "bom-ref": "pkg:npm/pkg_event", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify/test/pkg_event/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify/test/pkg_event/package.json" } ], "concludedValue": "node_modules/browserify/test/pkg_event/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "browser-resolve", "version": "1.8.2", "description": "resolve which handles browser field support in package.json", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-resolve@1.8.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/node-browser-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-resolve@1.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/package.json" } ], "concludedValue": "node_modules/browser-resolve/package.json" } ] } }, { "group": "", "name": "skip", "version": "0.0.0", "scope": "optional", "purl": "pkg:npm/skip@0.0.0", "type": "library", "bom-ref": "pkg:npm/skip@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-resolve/example/skip/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/example/skip/package.json" } ], "concludedValue": "node_modules/browser-resolve/example/skip/package.json" } ] } }, { "group": "", "name": "custom", "version": "0.0.0", "scope": "optional", "purl": "pkg:npm/custom@0.0.0", "type": "library", "bom-ref": "pkg:npm/custom@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-resolve/example/custom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/example/custom/package.json" } ], "concludedValue": "node_modules/browser-resolve/example/custom/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "browser-pack", "version": "4.0.4", "description": "pack node-style source files from a json stream into a browser bundle", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-pack@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/browser-pack" }, { "type": "vcs", "url": "git://github.com/substack/browser-pack.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-pack@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-pack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/package.json" } ], "concludedValue": "node_modules/browser-pack/package.json" } ] }, "tags": [ "json", "stream" ] }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "brorand", "version": "1.1.0", "description": "Random number generator for browsers and node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brorand@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/brorand" } ], "type": "library", "bom-ref": "pkg:npm/brorand@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/brorand/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brorand/package.json" } ], "concludedValue": "node_modules/brorand/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.21", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.21", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "bn.js", "version": "5.2.5", "description": "Big number implementation in pure javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bn.js@5.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/bn.js" } ], "type": "library", "bom-ref": "pkg:npm/bn.js@5.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/bn.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bn.js/package.json" } ], "concludedValue": "node_modules/bn.js/package.json" } ] } }, { "authors": [ { "name": "T. Jameson Little " } ], "group": "", "name": "base64-js", "version": "0.0.8", "description": "Base64 encoding/decoding in pure JS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/base64-js@0.0.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/beatgammit/base64-js.git" } ], "type": "library", "bom-ref": "pkg:npm/base64-js@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/base64-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/base64-js/package.json" } ], "concludedValue": "node_modules/base64-js/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babelify", "version": "5.0.5", "description": "Babel browserify transform", "scope": "required", "purl": "pkg:npm/babelify@5.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/babel/babelify" }, { "type": "vcs", "url": "https://github.com/babel/babelify.git" } ], "type": "library", "bom-ref": "pkg:npm/babelify@5.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/babelify/package.json" }, { "name": "ImportedModules", "value": "babelify" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babelify/package.json" } ], "concludedValue": "node_modules/babelify/package.json" } ], "occurrences": [ { "location": "bin/build-acorn.js", "line": 5 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-core", "version": "4.7.16", "description": "Turn ES6 code into readable vanilla ES5 with source maps", "scope": "optional", "purl": "pkg:npm/babel-core@4.7.16", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-core@4.7.16", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-core/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-core/package.json" } ], "concludedValue": "node_modules/babel-core/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "available-typed-arrays", "version": "1.0.7", "description": "Returns an array of Typed Array names that are available in the current environment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/available-typed-arrays@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/available-typed-arrays#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/available-typed-arrays.git" } ], "type": "library", "bom-ref": "pkg:npm/available-typed-arrays@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/available-typed-arrays/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/available-typed-arrays/package.json" } ], "concludedValue": "node_modules/available-typed-arrays/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "astw", "version": "2.0.0", "description": "walk the ast with references to parent nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/astw@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/astw" }, { "type": "vcs", "url": "git://github.com/substack/astw.git" } ], "type": "library", "bom-ref": "pkg:npm/astw@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/astw/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/astw/package.json" } ], "concludedValue": "node_modules/astw/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "ast-types", "version": "0.7.8", "description": "Esprima-compatible implementation of the Mozilla JS Parser API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ast-types@0.7.8", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/ast-types" }, { "type": "vcs", "url": "git://github.com/benjamn/ast-types.git" } ], "type": "library", "bom-ref": "pkg:npm/ast-types@0.7.8", "properties": [ { "name": "SrcFile", "value": "node_modules/ast-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ast-types/package.json" } ], "concludedValue": "node_modules/ast-types/package.json" } ] } }, { "group": "", "name": "assert", "version": "1.3.0", "description": "commonjs assert - node.js api compatible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/commonjs-assert" }, { "type": "vcs", "url": "git://github.com/defunctzombie/commonjs-assert.git" } ], "type": "library", "bom-ref": "pkg:npm/assert@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert/package.json" } ], "concludedValue": "node_modules/assert/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Fedor Indutny" } ], "group": "", "name": "asn1.js", "version": "4.10.1", "description": "ASN.1 encoder and decoder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asn1.js@4.10.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/asn1.js" } ], "type": "library", "bom-ref": "pkg:npm/asn1.js@4.10.1", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1.js/package.json" } ], "concludedValue": "node_modules/asn1.js/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "2.2.1", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@2.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "2.1.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@2.1.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "James Burke (http://github.com/jrburke)" } ], "group": "", "name": "amdefine", "version": "1.0.1", "description": "Provide AMD's define() API for declaring modules in the AMD format", "scope": "optional", "licenses": [ { "expression": "BSD-3-Clause OR MIT" } ], "purl": "pkg:npm/amdefine@1.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/jrburke/amdefine" }, { "type": "vcs", "url": "https://github.com/jrburke/amdefine.git" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/amdefine/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/amdefine/package.json" } ], "concludedValue": "node_modules/amdefine/package.json" } ] }, "tags": [ "api" ] }, { "group": "", "name": "acorn-walk", "version": "7.2.0", "description": "ECMAScript (ESTree) AST walker", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-walk@7.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-walk/package.json" } ], "concludedValue": "node_modules/acorn-walk/package.json" } ] } }, { "authors": [ { "name": "Renée Kooi " } ], "group": "", "name": "acorn-node", "version": "1.8.2", "description": "the acorn javascript parser, preloaded with plugins for syntax parity with recent node versions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-node@1.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/acorn-node" }, { "type": "vcs", "url": "https://github.com/browserify/acorn-node.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-node@1.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-node/package.json" } ], "concludedValue": "node_modules/acorn-node/package.json" } ] }, "tags": [ "plugins" ] }, { "group": "", "name": "acorn-babel", "version": "0.11.1-38", "description": "Acorn fork used by babel", "scope": "optional", "purl": "pkg:npm/acorn-babel@0.11.1-38", "type": "library", "bom-ref": "pkg:npm/acorn-babel@0.11.1-38", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-babel/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-babel/package.json" } ], "concludedValue": "node_modules/acorn-babel/package.json" } ] } }, { "group": "", "name": "acorn", "version": "1.2.2", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/marijnh/acorn" }, { "type": "vcs", "url": "https://github.com/marijnh/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://bit.ly/dominictarr)" } ], "group": "", "name": "JSONStream", "version": "0.10.0", "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", "scope": "optional", "purl": "pkg:npm/JSONStream@0.10.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/JSONStream" }, { "type": "vcs", "url": "git://github.com/dominictarr/JSONStream.git" } ], "type": "library", "bom-ref": "pkg:npm/JSONStream@0.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/JSONStream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/JSONStream/package.json" } ], "concludedValue": "node_modules/JSONStream/package.json" } ] } }, { "authors": [ { "name": "David Chambers " } ], "group": "", "name": "Base64", "version": "0.2.1", "description": "Base64 encoding and decoding", "scope": "optional", "purl": "pkg:npm/Base64@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davidchambers/Base64.js.git" } ], "type": "library", "bom-ref": "pkg:npm/Base64@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/Base64/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/Base64/package.json" } ], "concludedValue": "node_modules/Base64/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/acorn@1.2.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-18T02:48:25Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'acorn' with version '1.2.2'." } ] }