{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:8ec6dfe8-b5cf-4bb6-931c-fa2f0464b182", "version": 1, "metadata": { "timestamp": "2026-10-24T21:31:38Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "openinference-instrumentation-openai-agents", "group": "@arizeai", "version": "0.2.14", "description": "OpenInference instrumentation for OpenAI Agents SDK", "purl": "pkg:npm/%40arizeai/openinference-instrumentation-openai-agents@0.2.14", "bom-ref": "pkg:npm/@arizeai/openinference-instrumentation-openai-agents@0.2.14", "author": "oss-devs@arize.com", "properties": [ { "name": "cdx:npm:scripts", "value": "prebuild, build, postbuild, version:update, type:check, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Arize-ai/openinference.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@arizeai\\n@openai\\n@opentelemetry\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@arizeai/openinference-core/package.json\\nnode_modules/@arizeai/openinference-semantic-conventions/package.json\\nnode_modules/@openai/agents/package.json\\nnode_modules/@opentelemetry/api/package.json\\nnode_modules/@opentelemetry/core/package.json\\nnode_modules/@opentelemetry/exporter-trace-otlp-proto/package.json\\nnode_modules/@opentelemetry/instrumentation/package.json\\nnode_modules/@opentelemetry/resources/package.json\\nnode_modules/@opentelemetry/sdk-trace-base/package.json\\nnode_modules/@opentelemetry/sdk-trace-node/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/openai/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json\\nnode_modules/zod/package.json" } ] }, "components": [ { "authors": [ { "name": "Colin McDonnell " } ], "group": "", "name": "zod", "version": "4.3.6", "description": "TypeScript-first schema declaration and validation library with static type inference", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zod@4.3.6", "externalReferences": [ { "type": "website", "url": "https://zod.dev" }, { "type": "vcs", "url": "git+https://github.com/colinhacks/zod.git" } ], "type": "library", "bom-ref": "pkg:npm/zod@4.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/zod/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zod/package.json" } ], "concludedValue": "node_modules/zod/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.1.9", "description": "Next generation testing framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.1.9", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "7.0.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@7.0.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "OpenAI " } ], "group": "", "name": "openai", "version": "4.104.0", "description": "The official TypeScript library for the OpenAI API", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/openai@4.104.0", "type": "library", "bom-ref": "pkg:npm/openai@4.104.0", "properties": [ { "name": "SrcFile", "value": "node_modules/openai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/openai/package.json" } ], "concludedValue": "node_modules/openai/package.json" } ] }, "tags": [ "ml" ] }, { "group": "@types", "name": "node", "version": "20.19.23", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@20.19.23", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.19.23", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-node", "version": "1.30.1", "description": "OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-node@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-node" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-node@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-base", "version": "1.30.1", "description": "OpenTelemetry Tracing", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-base@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-base" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-base@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "resources", "version": "1.30.1", "description": "OpenTelemetry SDK resources", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/resources@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-resources" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/resources@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/resources/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/resources/package.json" } ], "concludedValue": "node_modules/@opentelemetry/resources/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "instrumentation", "version": "0.46.0", "description": "Base class for node which OpenTelemetry instrumentation modules extend", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/instrumentation@0.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-instrumentation" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/instrumentation@0.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/instrumentation/package.json" }, { "name": "ExportedModules", "value": "instrumentation,isPatched,instrumentation/isPatched,OpenAIAgentsInstrumentation,instrumentation/OpenAIAgentsInstrumentation" }, { "name": "ImportedModules", "value": "@opentelemetry/instrumentation,InstrumentationBase,@opentelemetry/instrumentation/InstrumentationBase,InstrumentationNodeModuleDefinition,@opentelemetry/instrumentation/InstrumentationNodeModuleDefinition,InstrumentationConfig,@opentelemetry/instrumentation/InstrumentationConfig,InstrumentationModuleDefinition,@opentelemetry/instrumentation/InstrumentationModuleDefinition" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/instrumentation/package.json" } ], "concludedValue": "node_modules/@opentelemetry/instrumentation/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 2 }, { "location": "dist/src/instrumentation.js", "line": 6 }, { "location": "src/instrumentation.ts", "line": 7 }, { "location": "src/instrumentation.ts", "line": 11 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "exporter-trace-otlp-proto", "version": "0.50.0", "description": "OpenTelemetry Collector Exporter allows user to send collected traces to the OpenTelemetry Collector using protobuf over HTTP", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/exporter-trace-otlp-proto@0.50.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/exporter-trace-otlp-proto" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/exporter-trace-otlp-proto@0.50.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ], "concludedValue": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "core", "version": "2.8.0", "description": "OpenTelemetry Core provides constants and utilities shared by all OpenTelemetry SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/core@2.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-core" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/core@2.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/core/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/core,isTracingSuppressed,@opentelemetry/core/isTracingSuppressed" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/core/package.json" } ], "concludedValue": "node_modules/@opentelemetry/core/package.json" } ], "occurrences": [ { "location": "dist/esm/processor.js", "line": 2 }, { "location": "dist/esm/processor.js", "line": 928 }, { "location": "dist/esm/processor.js", "line": 1150 }, { "location": "dist/src/processor.js", "line": 14 }, { "location": "src/processor.ts", "line": 17 }, { "location": "src/processor.ts", "line": 1157 }, { "location": "src/processor.ts", "line": 1406 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "api", "version": "1.9.0", "description": "Public API for OpenTelemetry", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/api@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/api" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/api@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/api/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/api,diag,@opentelemetry/api/diag,context,@opentelemetry/api/context,SpanStatusCode,@opentelemetry/api/SpanStatusCode,trace,@opentelemetry/api/trace,Tracer,@opentelemetry/api/Tracer,TracerProvider,@opentelemetry/api/TracerProvider,Attributes,@opentelemetry/api/Attributes,HrTime,@opentelemetry/api/HrTime,Span,@opentelemetry/api/Span" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/api/package.json" } ], "concludedValue": "node_modules/@opentelemetry/api/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 1 }, { "location": "dist/esm/instrumentation.js", "line": 82 }, { "location": "dist/esm/instrumentation.js", "line": 100 }, { "location": "dist/esm/instrumentation.js", "line": 150 }, { "location": "dist/esm/instrumentation.js", "line": 155 }, { "location": "dist/esm/instrumentation.js", "line": 179 }, { "location": "dist/esm/instrumentation.js", "line": 224 }, { "location": "dist/esm/instrumentation.js", "line": 241 }, { "location": "dist/esm/processor.js", "line": 1 }, { "location": "dist/esm/processor.js", "line": 928 }, { "location": "dist/esm/processor.js", "line": 972 }, { "location": "dist/esm/processor.js", "line": 973 }, { "location": "dist/esm/processor.js", "line": 1150 }, { "location": "dist/src/instrumentation.js", "line": 5 }, { "location": "dist/src/processor.js", "line": 13 }, { "location": "src/instrumentation.ts", "line": 2 }, { "location": "src/instrumentation.ts", "line": 3 }, { "location": "src/instrumentation.ts", "line": 169 }, { "location": "src/instrumentation.ts", "line": 190 }, { "location": "src/instrumentation.ts", "line": 246 }, { "location": "src/instrumentation.ts", "line": 252 }, { "location": "src/instrumentation.ts", "line": 278 }, { "location": "src/instrumentation.ts", "line": 326 }, { "location": "src/instrumentation.ts", "line": 343 }, { "location": "src/processor.ts", "line": 15 }, { "location": "src/processor.ts", "line": 16 }, { "location": "src/processor.ts", "line": 1157 }, { "location": "src/processor.ts", "line": 1204 }, { "location": "src/processor.ts", "line": 1205 }, { "location": "src/processor.ts", "line": 1406 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "OpenAI " } ], "group": "@openai", "name": "agents", "version": "0.11.4", "description": "The OpenAI Agents SDK is a lightweight yet powerful framework for building multi-agent workflows.", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40openai/agents@0.11.4", "externalReferences": [ { "type": "vcs", "url": "https://openai.github.io/openai-agents-js/" } ], "type": "framework", "bom-ref": "pkg:npm/@openai/agents@0.11.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@openai/agents/package.json" }, { "name": "ImportedModules", "value": "@openai/agents,AgentSpanData,@openai/agents/AgentSpanData,CustomSpanData,@openai/agents/CustomSpanData,FunctionSpanData,@openai/agents/FunctionSpanData,GenerationSpanData,@openai/agents/GenerationSpanData,GenerationUsageData,@openai/agents/GenerationUsageData,HandoffSpanData,@openai/agents/HandoffSpanData,MCPListToolsSpanData,@openai/agents/MCPListToolsSpanData,ResponseSpanData,@openai/agents/ResponseSpanData,Span,@openai/agents/Span,SpanData,@openai/agents/SpanData,Trace,@openai/agents/Trace,TracingProcessor,@openai/agents/TracingProcessor" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@openai/agents/package.json" } ], "concludedValue": "node_modules/@openai/agents/package.json" } ], "occurrences": [ { "location": "src/instrumentation.ts", "line": 1 }, { "location": "src/processor.ts", "line": 14 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-semantic-conventions", "version": "2.11.0", "description": "This package provides OpenInference semantic conventions for tracing of LLM Applications.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-semantic-conventions@2.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-semantic-conventions" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-semantic-conventions@2.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-semantic-conventions,GRAPH_NODE_ID,@arizeai/openinference-semantic-conventions/GRAPH_NODE_ID,GRAPH_NODE_PARENT_ID,@arizeai/openinference-semantic-conventions/GRAPH_NODE_PARENT_ID,INPUT_MIME_TYPE,@arizeai/openinference-semantic-conventions/INPUT_MIME_TYPE,INPUT_VALUE,@arizeai/openinference-semantic-conventions/INPUT_VALUE,LLM_FINISH_REASON,@arizeai/openinference-semantic-conventions/LLM_FINISH_REASON,LLM_INPUT_MESSAGES,@arizeai/openinference-semantic-conventions/LLM_INPUT_MESSAGES,LLM_INVOCATION_PARAMETERS,@arizeai/openinference-semantic-conventions/LLM_INVOCATION_PARAMETERS,LLM_MODEL_NAME,@arizeai/openinference-semantic-conventions/LLM_MODEL_NAME,LLM_OUTPUT_MESSAGES,@arizeai/openinference-semantic-conventions/LLM_OUTPUT_MESSAGES,LLM_PROVIDER,@arizeai/openinference-semantic-conventions/LLM_PROVIDER,LLM_SYSTEM,@arizeai/openinference-semantic-conventions/LLM_SYSTEM,LLM_TOKEN_COUNT_COMPLETION,@arizeai/openinference-semantic-conventions/LLM_TOKEN_COUNT_COMPLETION,LLM_TOKEN_COUNT_COMPLETION_DETAILS_REASONING,@arizeai/openinference-semantic-conventions/LLM_TOKEN_COUNT_COMPLETION_DETAILS_REASONING,LLM_TOKEN_COUNT_PROMPT,@arizeai/openinference-semantic-conventions/LLM_TOKEN_COUNT_PROMPT,LLM_TOKEN_COUNT_PROMPT_DETAILS_CACHE_READ,@arizeai/openinference-semantic-conventions/LLM_TOKEN_COUNT_PROMPT_DETAILS_CACHE_READ,LLM_TOKEN_COUNT_TOTAL,@arizeai/openinference-semantic-conventions/LLM_TOKEN_COUNT_TOTAL,LLM_TOOLS,@arizeai/openinference-semantic-conventions/LLM_TOOLS,LLMProvider,@arizeai/openinference-semantic-conventions/LLMProvider,LLMSystem,@arizeai/openinference-semantic-conventions/LLMSystem,MESSAGE_CONTENT,@arizeai/openinference-semantic-conventions/MESSAGE_CONTENT,MESSAGE_CONTENT_TEXT,@arizeai/openinference-semantic-conventions/MESSAGE_CONTENT_TEXT,MESSAGE_CONTENT_TYPE,@arizeai/openinference-semantic-conventions/MESSAGE_CONTENT_TYPE,MESSAGE_CONTENTS,@arizeai/openinference-semantic-conventions/MESSAGE_CONTENTS,MESSAGE_ROLE,@arizeai/openinference-semantic-conventions/MESSAGE_ROLE,MESSAGE_TOOL_CALL_ID,@arizeai/openinference-semantic-conventions/MESSAGE_TOOL_CALL_ID,MESSAGE_TOOL_CALLS,@arizeai/openinference-semantic-conventions/MESSAGE_TOOL_CALLS,MimeType,@arizeai/openinference-semantic-conventions/MimeType,OpenInferenceSpanKind,@arizeai/openinference-semantic-conventions/OpenInferenceSpanKind,OUTPUT_MIME_TYPE,@arizeai/openinference-semantic-conventions/OUTPUT_MIME_TYPE,OUTPUT_VALUE,@arizeai/openinference-semantic-conventions/OUTPUT_VALUE,SemanticConventions,@arizeai/openinference-semantic-conventions/SemanticConventions,TOOL_CALL_FUNCTION_ARGUMENTS_JSON,@arizeai/openinference-semantic-conventions/TOOL_CALL_FUNCTION_ARGUMENTS_JSON,TOOL_CALL_FUNCTION_NAME,@arizeai/openinference-semantic-conventions/TOOL_CALL_FUNCTION_NAME,TOOL_CALL_ID,@arizeai/openinference-semantic-conventions/TOOL_CALL_ID,TOOL_JSON_SCHEMA,@arizeai/openinference-semantic-conventions/TOOL_JSON_SCHEMA,TOOL_NAME,@arizeai/openinference-semantic-conventions/TOOL_NAME" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "occurrences": [ { "location": "dist/esm/processor.js", "line": 4 }, { "location": "dist/src/processor.js", "line": 16 }, { "location": "src/processor.ts", "line": 58 } ] } }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-core", "version": "2.7.0", "description": "OpenInference Core provides utilities shared by all OpenInference SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-core@2.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-core" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-core@2.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-core/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-core,OITracer,@arizeai/openinference-core/OITracer,safelyJSONStringify,@arizeai/openinference-core/safelyJSONStringify,TraceConfigOptions,@arizeai/openinference-core/TraceConfigOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-core/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-core/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 3 }, { "location": "dist/esm/processor.js", "line": 3 }, { "location": "dist/esm/processor.js", "line": 199 }, { "location": "dist/esm/processor.js", "line": 299 }, { "location": "dist/esm/processor.js", "line": 303 }, { "location": "dist/esm/processor.js", "line": 311 }, { "location": "dist/esm/processor.js", "line": 459 }, { "location": "dist/esm/processor.js", "line": 473 }, { "location": "dist/esm/processor.js", "line": 477 }, { "location": "dist/esm/processor.js", "line": 599 }, { "location": "dist/esm/processor.js", "line": 623 }, { "location": "dist/esm/processor.js", "line": 659 }, { "location": "dist/esm/processor.js", "line": 694 }, { "location": "dist/esm/processor.js", "line": 790 }, { "location": "dist/esm/processor.js", "line": 804 }, { "location": "dist/esm/processor.js", "line": 840 }, { "location": "dist/esm/processor.js", "line": 853 }, { "location": "dist/esm/processor.js", "line": 868 }, { "location": "dist/src/instrumentation.js", "line": 7 }, { "location": "dist/src/processor.js", "line": 15 }, { "location": "src/instrumentation.ts", "line": 13 }, { "location": "src/instrumentation.ts", "line": 14 }, { "location": "src/processor.ts", "line": 19 }, { "location": "src/processor.ts", "line": 20 }, { "location": "src/processor.ts", "line": 300 }, { "location": "src/processor.ts", "line": 435 }, { "location": "src/processor.ts", "line": 440 }, { "location": "src/processor.ts", "line": 449 }, { "location": "src/processor.ts", "line": 625 }, { "location": "src/processor.ts", "line": 642 }, { "location": "src/processor.ts", "line": 647 }, { "location": "src/processor.ts", "line": 784 }, { "location": "src/processor.ts", "line": 808 }, { "location": "src/processor.ts", "line": 844 }, { "location": "src/processor.ts", "line": 886 }, { "location": "src/processor.ts", "line": 1004 }, { "location": "src/processor.ts", "line": 1019 }, { "location": "src/processor.ts", "line": 1055 }, { "location": "src/processor.ts", "line": 1070 }, { "location": "src/processor.ts", "line": 1087 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@arizeai/openinference-instrumentation-openai-agents@0.2.14" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-24T21:31:38Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'openinference-instrumentation-openai-agents' with version '0.2.14'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 15 source files." } ] }