{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:24fcbaf7-68dd-4087-9b82-c69c2ce06adb", "version": 1, "metadata": { "timestamp": "2026-10-14T15:17:03Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "core", "group": "@babel", "version": "7.9.0", "description": "Babel compiler core.", "purl": "pkg:npm/%40babel/core@7.9.0", "bom-ref": "pkg:npm/@babel/core@7.9.0", "author": "Sebastian McKenzie ", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@my-scope" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/helper-module-transforms/package.json\\nnode_modules/@babel/helper-transform-fixture-test-runner/package.json\\nnode_modules/@babel/helpers/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/template/package.json\\nnode_modules/@babel/traverse/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/debug/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/gensync/package.json\\nnode_modules/hasown/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/json5/package.json\\nnode_modules/lodash/package.json\\nnode_modules/ms/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/semver/package.json\\nnode_modules/source-map/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json" } ] }, "components": [ { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-preserve-symlinks-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-preserve-symlinks-flag/package.json" } ], "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "lib/transformation/file/merge-map.js", "line": 9 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "5.7.2", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@5.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "lib/config/helpers/config-api.js", "line": 9 }, { "location": "lib/transformation/file/file.js", "line": 59 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.13", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.13", "externalReferences": [ { "type": "vcs", "url": "ssh://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.13", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "ImportedModules", "value": "resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ], "occurrences": [ { "location": "lib/config/files/plugins.js", "line": 22 }, { "location": "lib/gensync-utils/resolve.js", "line": 9 }, { "location": "src/config/files/plugins.js", "line": 8 }, { "location": "src/config/files/plugins.js", "line": 99 }, { "location": "src/config/files/plugins.js", "line": 106 }, { "location": "src/config/files/plugins.js", "line": 117 }, { "location": "src/config/files/plugins.js", "line": 130 } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "ljharb-monorepo-symlink-test", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid_main", "version": "", "scope": "optional", "purl": "pkg:npm/invalid_main", "type": "library", "bom-ref": "pkg:npm/invalid_main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "false_main", "version": "", "scope": "optional", "purl": "pkg:npm/false_main", "type": "library", "bom-ref": "pkg:npm/false_main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/false_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "scope": "optional", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "group": "", "name": "baz", "version": "", "scope": "optional", "purl": "pkg:npm/baz", "type": "library", "bom-ref": "pkg:npm/baz", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/baz/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.7", "description": "Node.js path.parse() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.18.1", "description": "Lodash modular utilities.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "ImportedModules", "value": "lodash/escapeRegExp,lodash/sortBy,lodash/cloneDeep" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ], "occurrences": [ { "location": "lib/config/pattern-to-regex.js", "line": 19 }, { "location": "src/config/pattern-to-regex.js", "line": 3 }, { "location": "src/config/pattern-to-regex.js", "line": 42 }, { "location": "src/config/pattern-to-regex.js", "line": 47 }, { "location": "lib/transformation/block-hoist-plugin.js", "line": 9 }, { "location": "lib/transformation/normalize-file.js", "line": 39 }, { "location": "src/transformation/block-hoist-plugin.js", "line": 3 }, { "location": "src/transformation/block-hoist-plugin.js", "line": 54 } ] } }, { "authors": [ { "name": "Aseem Kishore " } ], "group": "", "name": "json5", "version": "2.2.3", "description": "JSON for Humans", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json5@2.2.3", "externalReferences": [ { "type": "website", "url": "http://json5.org/" }, { "type": "vcs", "url": "git+https://github.com/json5/json5.git" } ], "type": "library", "bom-ref": "pkg:npm/json5@2.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/json5/package.json" }, { "name": "ImportedModules", "value": "json5" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json5/package.json" } ], "concludedValue": "node_modules/json5/package.json" } ], "occurrences": [ { "location": "lib/config/files/configuration.js", "line": 33 }, { "location": "src/config/files/configuration.js", "line": 5 }, { "location": "src/config/files/configuration.js", "line": 257 } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-core-module", "version": "2.17.0", "description": "Is this specifier a node.js core module?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-core-module@2.17.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-core-module" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-core-module.git" } ], "type": "library", "bom-ref": "pkg:npm/is-core-module@2.17.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-core-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-core-module/package.json" } ], "concludedValue": "node_modules/is-core-module/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Logan Smyth " } ], "group": "", "name": "gensync", "version": "1.0.0-beta.2", "description": "Allows users to use generators in order to write common functions that can be both sync or async.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gensync@1.0.0-beta.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/loganfsmyth/gensync" }, { "type": "vcs", "url": "https://github.com/loganfsmyth/gensync.git" } ], "type": "library", "bom-ref": "pkg:npm/gensync@1.0.0-beta.2", "properties": [ { "name": "SrcFile", "value": "node_modules/gensync/package.json" }, { "name": "ImportedModules", "value": "gensync,Handler,gensync/Handler" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gensync/package.json" } ], "concludedValue": "node_modules/gensync/package.json" } ], "occurrences": [ { "location": "lib/config/caching.js", "line": 13 }, { "location": "lib/config/files/configuration.js", "line": 43 }, { "location": "lib/config/full.js", "line": 9 }, { "location": "lib/config/index.js", "line": 15 }, { "location": "lib/config/partial.js", "line": 20 }, { "location": "lib/gensync-utils/async.js", "line": 12 }, { "location": "lib/gensync-utils/fs.js", "line": 19 }, { "location": "lib/gensync-utils/resolve.js", "line": 19 }, { "location": "lib/parse.js", "line": 9 }, { "location": "lib/transform-ast.js", "line": 9 }, { "location": "lib/transform-file.js", "line": 9 }, { "location": "lib/transform.js", "line": 9 }, { "location": "src/config/files/configuration.js", "line": 6 }, { "location": "src/config/files/configuration.js", "line": 108 }, { "location": "src/config/files/index-browser.js", "line": 3 }, { "location": "src/config/files/module-types.js", "line": 2 }, { "location": "src/config/files/package.js", "line": 4 }, { "location": "src/config/full.js", "line": 3 }, { "location": "src/config/full.js", "line": 59 }, { "location": "src/config/index.js", "line": 3 }, { "location": "src/config/index.js", "line": 18 }, { "location": "src/gensync-utils/fs.js", "line": 4 }, { "location": "src/gensync-utils/fs.js", "line": 6 }, { "location": "src/gensync-utils/fs.js", "line": 11 }, { "location": "src/parser/index.js", "line": 1 } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "lib/config/config-chain.js", "line": 21 }, { "location": "lib/config/files/configuration.js", "line": 13 }, { "location": "lib/config/files/plugins.js", "line": 12 }, { "location": "lib/transformation/normalize-file.js", "line": 29 }, { "location": "src/config/files/configuration.js", "line": 3 }, { "location": "src/config/files/configuration.js", "line": 22 }, { "location": "src/config/files/plugins.js", "line": 7 }, { "location": "src/config/files/plugins.js", "line": 11 } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.9.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "ImportedModules", "value": "convert-source-map" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ], "occurrences": [ { "location": "lib/transformation/file/generate.js", "line": 9 }, { "location": "lib/transformation/normalize-file.js", "line": 59 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "types", "version": "7.9.0", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "ExportedModules", "value": "@babel/types" }, { "name": "ImportedModules", "value": "@babel/types" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ], "occurrences": [ { "location": "lib/index.js", "line": 188 }, { "location": "lib/tools/build-external-helpers.js", "line": 39 }, { "location": "lib/transformation/file/file.js", "line": 39 }, { "location": "lib/transformation/normalize-file.js", "line": 49 }, { "location": "src/index.js", "line": 10 }, { "location": "src/tools/build-external-helpers.js", "line": 4 }, { "location": "src/tools/build-external-helpers.js", "line": 25 }, { "location": "src/tools/build-external-helpers.js", "line": 28 }, { "location": "src/tools/build-external-helpers.js", "line": 30 }, { "location": "src/tools/build-external-helpers.js", "line": 31 }, { "location": "src/tools/build-external-helpers.js", "line": 33 }, { "location": "src/tools/build-external-helpers.js", "line": 34 }, { "location": "src/tools/build-external-helpers.js", "line": 35 }, { "location": "src/tools/build-external-helpers.js", "line": 37 }, { "location": "src/tools/build-external-helpers.js", "line": 38 }, { "location": "src/tools/build-external-helpers.js", "line": 40 }, { "location": "src/tools/build-external-helpers.js", "line": 41 }, { "location": "src/tools/build-external-helpers.js", "line": 43 }, { "location": "src/tools/build-external-helpers.js", "line": 44 }, { "location": "src/tools/build-external-helpers.js", "line": 51 }, { "location": "src/tools/build-external-helpers.js", "line": 52 }, { "location": "src/tools/build-external-helpers.js", "line": 54 }, { "location": "src/tools/build-external-helpers.js", "line": 56 }, { "location": "src/tools/build-external-helpers.js", "line": 57 }, { "location": "src/tools/build-external-helpers.js", "line": 73 }, { "location": "src/tools/build-external-helpers.js", "line": 76 }, { "location": "src/tools/build-external-helpers.js", "line": 81 }, { "location": "src/tools/build-external-helpers.js", "line": 85 }, { "location": "src/tools/build-external-helpers.js", "line": 89 }, { "location": "src/tools/build-external-helpers.js", "line": 90 }, { "location": "src/tools/build-external-helpers.js", "line": 96 }, { "location": "src/tools/build-external-helpers.js", "line": 98 }, { "location": "src/tools/build-external-helpers.js", "line": 99 }, { "location": "src/tools/build-external-helpers.js", "line": 101 }, { "location": "src/tools/build-external-helpers.js", "line": 102 }, { "location": "src/tools/build-external-helpers.js", "line": 104 }, { "location": "src/tools/build-external-helpers.js", "line": 105 }, { "location": "src/tools/build-external-helpers.js", "line": 107 }, { "location": "src/tools/build-external-helpers.js", "line": 113 }, { "location": "src/tools/build-external-helpers.js", "line": 117 }, { "location": "src/tools/build-external-helpers.js", "line": 118 }, { "location": "src/tools/build-external-helpers.js", "line": 121 }, { "location": "src/tools/build-external-helpers.js", "line": 123 }, { "location": "src/tools/build-external-helpers.js", "line": 130 }, { "location": "src/tools/build-external-helpers.js", "line": 131 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "traverse", "version": "7.9.0", "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/traverse@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/traverse@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/traverse/package.json" }, { "name": "ExportedModules", "value": "@babel/traverse" }, { "name": "ImportedModules", "value": "@babel/traverse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/traverse/package.json" } ], "concludedValue": "node_modules/@babel/traverse/package.json" } ], "occurrences": [ { "location": "lib/config/full.js", "line": 31 }, { "location": "lib/index.js", "line": 215 }, { "location": "lib/transformation/file/file.js", "line": 19 }, { "location": "lib/transformation/index.js", "line": 9 }, { "location": "src/config/full.js", "line": 17 }, { "location": "src/config/full.js", "line": 290 }, { "location": "src/index.js", "line": 13 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "template", "version": "7.8.6", "description": "Generate an AST from a string template.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/template@7.8.6", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/template@7.8.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/template/package.json" }, { "name": "ExportedModules", "value": "@babel/template" }, { "name": "ImportedModules", "value": "@babel/template" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/template/package.json" } ], "concludedValue": "node_modules/@babel/template/package.json" } ], "occurrences": [ { "location": "lib/index.js", "line": 225 }, { "location": "lib/tools/build-external-helpers.js", "line": 29 }, { "location": "src/index.js", "line": 14 }, { "location": "src/tools/build-external-helpers.js", "line": 3 } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "parser", "version": "7.9.0", "description": "A JavaScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "ExportedModules", "value": "@babel/parser" }, { "name": "ImportedModules", "value": "@babel/parser,parse,@babel/parser/parse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ], "occurrences": [ { "location": "lib/index.js", "line": 205 }, { "location": "lib/parser/index.js", "line": 9 }, { "location": "src/index.js", "line": 11 }, { "location": "src/parser/index.js", "line": 2 }, { "location": "src/parser/index.js", "line": 29 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "helpers", "version": "7.9.0", "description": "Collection of helper functions used by Babel transforms.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helpers@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helpers@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helpers/package.json" }, { "name": "ImportedModules", "value": "@babel/helpers" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helpers/package.json" } ], "concludedValue": "node_modules/@babel/helpers/package.json" } ], "occurrences": [ { "location": "lib/tools/build-external-helpers.js", "line": 9 }, { "location": "lib/transformation/file/file.js", "line": 9 }, { "location": "src/tools/build-external-helpers.js", "line": 1 }, { "location": "src/tools/build-external-helpers.js", "line": 140 }, { "location": "src/tools/build-external-helpers.js", "line": 141 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "helper-transform-fixture-test-runner", "version": "7.8.3", "description": "Transform test runner for @babel/helper-fixtures module", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-transform-fixture-test-runner@7.8.3", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-transform-fixture-test-runner@7.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-transform-fixture-test-runner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-transform-fixture-test-runner/package.json" } ], "concludedValue": "node_modules/@babel/helper-transform-fixture-test-runner/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Logan Smyth " } ], "group": "@babel", "name": "helper-module-transforms", "version": "7.9.0", "description": "Babel helper functions for implementing ES6 module transformations", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-module-transforms@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-module-transforms/package.json" }, { "name": "ImportedModules", "value": "@babel/helper-module-transforms" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-module-transforms/package.json" } ], "concludedValue": "node_modules/@babel/helper-module-transforms/package.json" } ], "occurrences": [ { "location": "lib/transformation/file/file.js", "line": 49 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "generator", "version": "7.9.0", "description": "Turns an AST into code.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/generator@7.9.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/generator@7.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/generator/package.json" }, { "name": "ImportedModules", "value": "@babel/generator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/generator/package.json" } ], "concludedValue": "node_modules/@babel/generator/package.json" } ], "occurrences": [ { "location": "lib/tools/build-external-helpers.js", "line": 19 }, { "location": "lib/transformation/file/generate.js", "line": 19 }, { "location": "src/tools/build-external-helpers.js", "line": 2 }, { "location": "src/tools/build-external-helpers.js", "line": 166 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "code-frame", "version": "7.8.3", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.8.3", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "ImportedModules", "value": "@babel/code-frame,codeFrameColumns,@babel/code-frame/codeFrameColumns" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ], "occurrences": [ { "location": "lib/parser/index.js", "line": 19 }, { "location": "lib/transformation/file/file.js", "line": 29 }, { "location": "src/parser/index.js", "line": 3 }, { "location": "src/parser/index.js", "line": 53 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@babel/core@7.9.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-14T15:17:03Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'core' with version '7.9.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 32 source files." } ] }