{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:f7f67eaf-5be1-46c5-a721-749c19efa269", "version": 1, "metadata": { "timestamp": "2026-10-18T08:49:32Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "react", "group": "@axe-core", "version": "4.14.0", "description": "Dynamic accessibility analysis for React using axe-core", "purl": "pkg:npm/%40axe-core/react@4.14.0", "bom-ref": "pkg:npm/@axe-core/react@4.14.0", "author": "Dylan Barrell (dylan@barrell.com)", "properties": [ { "name": "cdx:npm:scripts", "value": "build, prepare, test, test:export, test:esm, test:commonjs, test:ts, test:types, lint:package, lint:types, pack:lint" }, { "name": "cdx:npm:buildScripts", "value": "build, pack:lint" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "type": "application", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/dequelabs/axe-core-npm.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@types\\n@wojtekmaj" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/core/package.json\\nnode_modules/@babel/preset-env/package.json\\nnode_modules/@babel/preset-react/package.json\\nnode_modules/@babel/preset-typescript/package.json\\nnode_modules/@types/react-dom/package.json\\nnode_modules/@types/react/package.json\\nnode_modules/@types/requestidlecallback/package.json\\nnode_modules/@wojtekmaj/enzyme-adapter-react-17/package.json\\nnode_modules/axe-core/package.json\\nnode_modules/chai/package.json\\nnode_modules/enzyme/package.json\\nnode_modules/http-server/package.json\\nnode_modules/jest-environment-jsdom/package.json\\nnode_modules/jest/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react-shadow/package.json\\nnode_modules/react/package.json\\nnode_modules/requestidlecallback/package.json\\nnode_modules/sinon/package.json\\nnode_modules/ts-node/package.json\\nnode_modules/tsup/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "6.0.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@6.0.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@6.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "EGOIST" } ], "group": "", "name": "tsup", "version": "8.5.1", "description": "Bundle your TypeScript library with no config, powered by esbuild", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsup@8.5.1", "externalReferences": [ { "type": "website", "url": "https://tsup.egoist.dev/" }, { "type": "vcs", "url": "https://github.com/egoist/tsup.git" } ], "type": "library", "bom-ref": "pkg:npm/tsup@8.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsup/package.json" } ], "concludedValue": "node_modules/tsup/package.json" } ] } }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "", "name": "ts-node", "version": "10.9.2", "description": "TypeScript execution environment and REPL for node.js, with source map support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ts-node@10.9.2", "externalReferences": [ { "type": "website", "url": "https://typestrong.org/ts-node" }, { "type": "vcs", "url": "git://github.com/TypeStrong/ts-node.git" } ], "type": "library", "bom-ref": "pkg:npm/ts-node@10.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ts-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ts-node/package.json" } ], "concludedValue": "node_modules/ts-node/package.json" } ] } }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "sinon", "version": "22.1.0", "description": "JavaScript test spies, stubs and mocks.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sinon@22.1.0", "externalReferences": [ { "type": "website", "url": "https://sinonjs.org/" }, { "type": "vcs", "url": "git+https://github.com/sinonjs/sinon.git" } ], "type": "library", "bom-ref": "pkg:npm/sinon@22.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sinon/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sinon/package.json" } ], "concludedValue": "node_modules/sinon/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Alexander Farkas " } ], "group": "", "name": "requestidlecallback", "version": "0.3.0", "description": "A polyfill for the requestIdleCallback.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/requestidlecallback@0.3.0", "type": "library", "bom-ref": "pkg:npm/requestidlecallback@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/requestidlecallback/package.json" }, { "name": "ImportedModules", "value": "requestidlecallback" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/requestidlecallback/package.json" } ], "concludedValue": "node_modules/requestidlecallback/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 37 }, { "location": "dist/index.mjs", "line": 3 }, { "location": "index.ts", "line": 3 } ] } }, { "authors": [ { "name": "Adam Timberlake " } ], "group": "", "name": "react-shadow", "version": "20.6.0", "description": "Utilise Shadow DOM in React with all the benefits of style encapsulation.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-shadow@20.6.0", "type": "framework", "bom-ref": "pkg:npm/react-shadow@20.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react-shadow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-shadow/package.json" } ], "concludedValue": "node_modules/react-shadow/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react-dom", "version": "17.0.2", "description": "React package for working with the DOM.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-dom@17.0.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-dom@17.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-dom/package.json" } ], "concludedValue": "node_modules/react-dom/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react", "version": "17.0.2", "description": "React is a JavaScript library for building user interfaces.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react@17.0.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@17.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "jest-environment-jsdom", "version": "30.4.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jest-environment-jsdom@30.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jestjs/jest.git" } ], "type": "library", "bom-ref": "pkg:npm/jest-environment-jsdom@30.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jest-environment-jsdom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jest-environment-jsdom/package.json" } ], "concludedValue": "node_modules/jest-environment-jsdom/package.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "jest", "version": "30.4.2", "description": "Delightful JavaScript Testing.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jest@30.4.2", "externalReferences": [ { "type": "website", "url": "https://jestjs.io/" }, { "type": "vcs", "url": "https://github.com/jestjs/jest.git" } ], "type": "library", "bom-ref": "pkg:npm/jest@30.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jest/package.json" } ], "concludedValue": "node_modules/jest/package.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "http-server", "version": "14.1.1", "description": "A simple zero-configuration command-line http server", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-server@14.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/http-party/http-server.git" } ], "type": "library", "bom-ref": "pkg:npm/http-server@14.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/http-server/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-server/package.json" } ], "concludedValue": "node_modules/http-server/package.json" } ] } }, { "authors": [ { "name": "Leland Richardson " } ], "group": "", "name": "enzyme", "version": "3.11.0", "description": "JavaScript Testing utilities for React", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/enzyme@3.11.0", "externalReferences": [ { "type": "website", "url": "https://airbnb.io/enzyme/" }, { "type": "vcs", "url": "https://github.com/airbnb/enzyme.git" } ], "type": "library", "bom-ref": "pkg:npm/enzyme@3.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/enzyme/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/enzyme/package.json" } ], "concludedValue": "node_modules/enzyme/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "chai", "version": "4.5.0", "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chai@4.5.0", "externalReferences": [ { "type": "website", "url": "http://chaijs.com" }, { "type": "vcs", "url": "https://github.com/chaijs/chai" } ], "type": "framework", "bom-ref": "pkg:npm/chai@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chai/package.json" } ], "concludedValue": "node_modules/chai/package.json" } ] }, "tags": [ "framework", "test" ] }, { "group": "", "name": "axe-core", "version": "4.14.0", "description": "Accessibility engine for automated Web UI testing", "scope": "required", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/axe-core@4.14.0", "externalReferences": [ { "type": "website", "url": "https://www.deque.com/axe/" }, { "type": "vcs", "url": "https://github.com/dequelabs/axe-core.git" } ], "type": "library", "bom-ref": "pkg:npm/axe-core@4.14.0", "properties": [ { "name": "SrcFile", "value": "node_modules/axe-core/package.json" }, { "name": "ImportedModules", "value": "axe-core" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/axe-core/package.json" } ], "concludedValue": "node_modules/axe-core/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 36 }, { "location": "dist/index.mjs", "line": 2 }, { "location": "dist/index.mjs", "line": 177 }, { "location": "dist/index.mjs", "line": 178 }, { "location": "dist/index.mjs", "line": 294 }, { "location": "dist/index.mjs", "line": 298 }, { "location": "dist/index.mjs", "line": 300 }, { "location": "index.ts", "line": 2 }, { "location": "index.ts", "line": 216 }, { "location": "index.ts", "line": 217 }, { "location": "index.ts", "line": 390 }, { "location": "index.ts", "line": 397 }, { "location": "index.ts", "line": 399 }, { "location": "dist/index.d.mts", "line": 1 } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "@wojtekmaj", "name": "enzyme-adapter-react-17", "version": "0.8.0", "description": "JavaScript Testing utilities for React", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40wojtekmaj/enzyme-adapter-react-17@0.8.0", "externalReferences": [ { "type": "vcs", "url": "https://enzymejs.github.io/enzyme/" }, { "type": "vcs", "url": "https://github.com/wojtekmaj/enzyme-adapter-react-17.git" } ], "type": "library", "bom-ref": "pkg:npm/@wojtekmaj/enzyme-adapter-react-17@0.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@wojtekmaj/enzyme-adapter-react-17/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@wojtekmaj/enzyme-adapter-react-17/package.json" } ], "concludedValue": "node_modules/@wojtekmaj/enzyme-adapter-react-17/package.json" } ] } }, { "group": "@types", "name": "requestidlecallback", "version": "0.3.7", "description": "TypeScript definitions for requestidlecallback", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/requestidlecallback@0.3.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/requestidlecallback" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/requestidlecallback@0.3.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/requestidlecallback/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/requestidlecallback/package.json" } ], "concludedValue": "node_modules/@types/requestidlecallback/package.json" } ] } }, { "group": "@types", "name": "react-dom", "version": "17.0.0", "description": "TypeScript definitions for React (react-dom)", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/react-dom@17.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/react-dom@17.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/react-dom/package.json" } ], "concludedValue": "node_modules/@types/react-dom/package.json" } ] } }, { "group": "@types", "name": "react", "version": "17.0.0", "description": "TypeScript definitions for React", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/react@17.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/react@17.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/react/package.json" } ], "concludedValue": "node_modules/@types/react/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "preset-typescript", "version": "7.29.7", "description": "Babel preset for TypeScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/preset-typescript@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-preset-typescript" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/preset-typescript@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/preset-typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/preset-typescript/package.json" } ], "concludedValue": "node_modules/@babel/preset-typescript/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "preset-react", "version": "7.29.7", "description": "Babel preset for all React plugins.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/preset-react@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-preset-react" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/preset-react@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/preset-react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/preset-react/package.json" } ], "concludedValue": "node_modules/@babel/preset-react/package.json" } ] }, "tags": [ "plugins" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "preset-env", "version": "7.29.7", "description": "A Babel preset for each environment.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/preset-env@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-preset-env" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/preset-env@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/preset-env/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/preset-env/package.json" } ], "concludedValue": "node_modules/@babel/preset-env/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "core", "version": "7.29.7", "description": "Babel compiler core.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/core@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-core" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/core@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/core/package.json" } ], "concludedValue": "node_modules/@babel/core/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@axe-core/react@4.14.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-18T08:49:32Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'react' with version '4.14.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 22 source files." } ] }