{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:bc4d947f-b2c4-4e62-b029-00024386e1f4", "version": 1, "metadata": { "timestamp": "2026-10-18T08:14:13Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "puppeteer", "group": "@axe-core", "version": "4.14.0", "description": "Provides a chainable axe API for Puppeteer and automatically injects into all frames", "purl": "pkg:npm/%40axe-core/puppeteer@4.14.0", "bom-ref": "pkg:npm/@axe-core/puppeteer@4.14.0", "author": "Adam Cutler", "properties": [ { "name": "cdx:npm:scripts", "value": "build, test, test:export, test:esm, test:commonjs, test:ts, coverage, prepublishOnly, lint:package, lint:types, pack:lint" }, { "name": "cdx:npm:buildScripts", "value": "build, pack:lint" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "type": "application", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/dequelabs/axe-core-npm.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@types/chai/package.json\\nnode_modules/@types/express/package.json\\nnode_modules/@types/mocha/package.json\\nnode_modules/@types/sinon/package.json\\nnode_modules/async-listen/package.json\\nnode_modules/axe-core/package.json\\nnode_modules/axe-test-fixtures/package.json\\nnode_modules/chai/package.json\\nnode_modules/cross-dirname/package.json\\nnode_modules/express/package.json\\nnode_modules/mocha/package.json\\nnode_modules/nyc/package.json\\nnode_modules/puppeteer/package.json\\nnode_modules/sinon/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/tsup/package.json" } ] }, "components": [ { "authors": [ { "name": "EGOIST" } ], "group": "", "name": "tsup", "version": "8.5.1", "description": "Bundle your TypeScript library with no config, powered by esbuild", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsup@8.5.1", "externalReferences": [ { "type": "website", "url": "https://tsup.egoist.dev/" }, { "type": "vcs", "url": "https://github.com/egoist/tsup.git" } ], "type": "library", "bom-ref": "pkg:npm/tsup@8.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsup/package.json" } ], "concludedValue": "node_modules/tsup/package.json" } ] } }, { "group": "", "name": "source-map-support", "version": "0.5.21", "description": "Fixes stack traces for files with source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-support@0.5.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.5.21", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "sinon", "version": "22.1.0", "description": "JavaScript test spies, stubs and mocks.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sinon@22.1.0", "externalReferences": [ { "type": "website", "url": "https://sinonjs.org/" }, { "type": "vcs", "url": "git+https://github.com/sinonjs/sinon.git" } ], "type": "library", "bom-ref": "pkg:npm/sinon@22.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sinon/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sinon/package.json" } ], "concludedValue": "node_modules/sinon/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "The Chromium Authors" } ], "group": "", "name": "puppeteer", "version": "25.12.0", "description": "A high-level API to control headless Chrome over the DevTools Protocol", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/puppeteer@25.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/puppeteer/puppeteer/tree/main/packages/puppeteer" } ], "type": "library", "bom-ref": "pkg:npm/puppeteer@25.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/puppeteer/package.json" }, { "name": "ImportedModules", "value": "puppeteer,Frame,puppeteer/Frame,Page,puppeteer/Page,Browser,puppeteer/Browser" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/puppeteer/package.json" } ], "concludedValue": "node_modules/puppeteer/package.json" } ], "occurrences": [ { "location": "example.js", "line": 2 }, { "location": "src/axePuppeteer.ts", "line": 10 }, { "location": "src/legacy.ts", "line": 2 }, { "location": "src/load-page.ts", "line": 2 }, { "location": "src/utils.ts", "line": 4 }, { "location": "dist/index.d.mts", "line": 3 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "nyc", "version": "18.0.0", "description": "the Istanbul command line interface", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nyc@18.0.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" } ], "type": "library", "bom-ref": "pkg:npm/nyc@18.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nyc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nyc/package.json" } ], "concludedValue": "node_modules/nyc/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "11.8.0", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@11.8.0", "externalReferences": [ { "type": "website", "url": "https://mochajs.org/" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@11.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "express", "version": "5.2.1", "description": "Fast, unopinionated, minimalist web framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/express@5.2.1", "externalReferences": [ { "type": "website", "url": "https://expressjs.com/" } ], "type": "framework", "bom-ref": "pkg:npm/express@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/express/package.json" } ], "concludedValue": "node_modules/express/package.json" } ] }, "tags": [ "framework", "web" ] }, { "group": "", "name": "cross-dirname", "version": "0.1.0", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-dirname@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JumpLink/cross-dirname.git" } ], "type": "library", "bom-ref": "pkg:npm/cross-dirname@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-dirname/package.json" }, { "name": "ImportedModules", "value": "cross-dirname,getFilename,cross-dirname/getFilename" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-dirname/package.json" } ], "concludedValue": "node_modules/cross-dirname/package.json" } ], "occurrences": [ { "location": "src/legacy.ts", "line": 3 }, { "location": "src/legacy.ts", "line": 64 }, { "location": "src/utils.ts", "line": 6 }, { "location": "src/utils.ts", "line": 26 } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "chai", "version": "4.5.0", "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chai@4.5.0", "externalReferences": [ { "type": "website", "url": "http://chaijs.com" }, { "type": "vcs", "url": "https://github.com/chaijs/chai" } ], "type": "framework", "bom-ref": "pkg:npm/chai@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chai/package.json" } ], "concludedValue": "node_modules/chai/package.json" } ] }, "tags": [ "framework", "test" ] }, { "group": "", "name": "axe-test-fixtures", "version": "1.0.0", "description": "Fixtures for testing integrations of axe-core", "scope": "optional", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/axe-test-fixtures@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dequelabs/axe-test-fixtures#readme" }, { "type": "vcs", "url": "git+https://github.com/dequelabs/axe-test-fixtures.git" } ], "type": "library", "bom-ref": "pkg:npm/axe-test-fixtures@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/axe-test-fixtures/package.json" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/axe-test-fixtures/package.json" } ], "concludedValue": "node_modules/axe-test-fixtures/package.json" } ] } }, { "group": "", "name": "axe-core", "version": "4.14.0", "description": "Accessibility engine for automated Web UI testing", "scope": "required", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/axe-core@4.14.0", "externalReferences": [ { "type": "website", "url": "https://www.deque.com/axe/" }, { "type": "vcs", "url": "https://github.com/dequelabs/axe-core.git" } ], "type": "library", "bom-ref": "pkg:npm/axe-core@4.14.0", "properties": [ { "name": "SrcFile", "value": "node_modules/axe-core/package.json" }, { "name": "ImportedModules", "value": "axe-core,RunOptions,axe-core/RunOptions,SerialContextObject,axe-core/SerialContextObject,Spec,axe-core/Spec,AxeResults,axe-core/AxeResults,SerialSelectorList,axe-core/SerialSelectorList,SerialFrameSelector,axe-core/SerialFrameSelector" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/axe-core/package.json" } ], "concludedValue": "node_modules/axe-core/package.json" } ], "occurrences": [ { "location": "src/axePartialRunner.ts", "line": 1 }, { "location": "src/axePuppeteer.ts", "line": 9 }, { "location": "src/browser.ts", "line": 2 }, { "location": "src/legacy.ts", "line": 5 }, { "location": "src/load-page.ts", "line": 1 }, { "location": "src/types.ts", "line": 1 }, { "location": "src/types.ts", "line": 2 }, { "location": "src/utils.ts", "line": 3 }, { "location": "dist/index.d.mts", "line": 1 }, { "location": "dist/index.d.mts", "line": 2 } ] }, "tags": [ "web" ] }, { "group": "", "name": "async-listen", "version": "3.1.0", "description": "`net.Server#listen()` helper that returns a Promise for async / await", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async-listen@3.1.0", "type": "library", "bom-ref": "pkg:npm/async-listen@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/async-listen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async-listen/package.json" } ], "concludedValue": "node_modules/async-listen/package.json" } ] } }, { "group": "@types", "name": "sinon", "version": "22.0.0", "description": "TypeScript definitions for sinon", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/sinon@22.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinon" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/sinon@22.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/sinon/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/sinon/package.json" } ], "concludedValue": "node_modules/@types/sinon/package.json" } ] } }, { "group": "@types", "name": "mocha", "version": "10.0.10", "description": "TypeScript definitions for mocha", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/mocha@10.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mocha" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/mocha@10.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/mocha/package.json" } ], "concludedValue": "node_modules/@types/mocha/package.json" } ] }, "tags": [ "test" ] }, { "group": "@types", "name": "express", "version": "5.0.6", "description": "TypeScript definitions for express", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/express@5.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/express@5.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/express/package.json" } ], "concludedValue": "node_modules/@types/express/package.json" } ] } }, { "group": "@types", "name": "chai", "version": "5.2.3", "description": "TypeScript definitions for chai", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/chai@5.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/chai" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/chai@5.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/chai/package.json" } ], "concludedValue": "node_modules/@types/chai/package.json" } ] }, "tags": [ "test" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@axe-core/puppeteer@4.14.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-18T08:14:13Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'puppeteer' with version '4.14.0'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 16 source files." } ] }