{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:84837c4c-a97f-412a-83e6-03ffd3ded07c", "version": 1, "metadata": { "timestamp": "2026-10-21T11:24:12Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.7", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "plugin-aws-lambda", "group": "@bugsnag", "version": "9.1.0", "description": "AWS Lambda support for @bugsnag/node", "purl": "pkg:npm/%40bugsnag/plugin-aws-lambda@9.1.0", "bom-ref": "pkg:npm/@bugsnag/plugin-aws-lambda@9.1.0", "author": "Bugsnag", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://www.bugsnag.com/" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/accepts/package.json\\nnode_modules/body-parser/package.json\\nnode_modules/content-disposition/package.json\\nnode_modules/cookie-signature/package.json\\nnode_modules/debug/node_modules/ms/package.json\\nnode_modules/debug/package.json\\nnode_modules/express/package.json\\nnode_modules/finalhandler/package.json\\nnode_modules/fresh/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/media-typer/package.json\\nnode_modules/merge-descriptors/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/path-to-regexp/package.json\\nnode_modules/qs/package.json\\nnode_modules/range-parser/package.json\\nnode_modules/raw-body/package.json\\nnode_modules/send/package.json\\nnode_modules/serve-static/package.json\\nnode_modules/type-is/package.json" } ] }, "components": [ { "group": "", "name": "type-is", "version": "1.6.18", "description": "Infer the content-type of a request.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-is@1.6.18", "type": "library", "bom-ref": "pkg:npm/type-is@1.6.18", "properties": [ { "name": "SrcFile", "value": "node_modules/type-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-is/package.json" } ], "concludedValue": "node_modules/type-is/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "serve-static", "version": "1.16.3", "description": "Serve static files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serve-static@1.16.3", "type": "library", "bom-ref": "pkg:npm/serve-static@1.16.3", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-static/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-static/package.json" } ], "concludedValue": "node_modules/serve-static/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "send", "version": "0.19.2", "description": "Better streaming static file server with Range and conditional-GET support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/send@0.19.2", "type": "library", "bom-ref": "pkg:npm/send@0.19.2", "properties": [ { "name": "SrcFile", "value": "node_modules/send/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/send/package.json" } ], "concludedValue": "node_modules/send/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "raw-body", "version": "2.5.3", "description": "Get and validate the raw body of a readable stream.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/raw-body@2.5.3", "type": "library", "bom-ref": "pkg:npm/raw-body@2.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/raw-body/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/raw-body/package.json" } ], "concludedValue": "node_modules/raw-body/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "range-parser", "version": "1.2.1", "description": "Range header field string parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/range-parser@1.2.1", "type": "library", "bom-ref": "pkg:npm/range-parser@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/range-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/range-parser/package.json" } ], "concludedValue": "node_modules/range-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "qs", "version": "6.15.3", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.15.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.15.3", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "group": "", "name": "path-to-regexp", "version": "0.1.13", "description": "Express style path to RegExp utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-to-regexp@0.1.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/path-to-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/path-to-regexp@0.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/path-to-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-to-regexp/package.json" } ], "concludedValue": "node_modules/path-to-regexp/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "0.6.3", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@0.6.3", "type": "library", "bom-ref": "pkg:npm/negotiator@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "1.6.0", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-mime" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "merge-descriptors", "version": "1.0.3", "description": "Merge objects using descriptors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-descriptors@1.0.3", "type": "library", "bom-ref": "pkg:npm/merge-descriptors@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-descriptors/package.json" } ], "concludedValue": "node_modules/merge-descriptors/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "media-typer", "version": "0.3.0", "description": "Simple RFC 6838 media type parser and formatter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/media-typer@0.3.0", "type": "library", "bom-ref": "pkg:npm/media-typer@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/media-typer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/media-typer/package.json" } ], "concludedValue": "node_modules/media-typer/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.4.24", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.4.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "fresh", "version": "0.5.2", "description": "HTTP response freshness testing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fresh@0.5.2", "type": "library", "bom-ref": "pkg:npm/fresh@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fresh/package.json" } ], "concludedValue": "node_modules/fresh/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "finalhandler", "version": "1.3.2", "description": "Node.js final http responder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/finalhandler@1.3.2", "type": "library", "bom-ref": "pkg:npm/finalhandler@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/finalhandler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/finalhandler/package.json" } ], "concludedValue": "node_modules/finalhandler/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "express", "version": "4.22.2", "description": "Fast, unopinionated, minimalist web framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/express@4.22.2", "externalReferences": [ { "type": "website", "url": "http://expressjs.com/" } ], "type": "framework", "bom-ref": "pkg:npm/express@4.22.2", "properties": [ { "name": "SrcFile", "value": "node_modules/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/express/package.json" } ], "concludedValue": "node_modules/express/package.json" } ] }, "tags": [ "framework", "web" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/node_modules/ms/package.json" } ], "concludedValue": "node_modules/debug/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "cookie-signature", "version": "1.0.7", "description": "Sign and unsign cookies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cookie-signature@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-cookie-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/cookie-signature@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie-signature/package.json" } ], "concludedValue": "node_modules/cookie-signature/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "content-disposition", "version": "0.5.4", "description": "Create and parse Content-Disposition header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/content-disposition@0.5.4", "type": "library", "bom-ref": "pkg:npm/content-disposition@0.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/content-disposition/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/content-disposition/package.json" } ], "concludedValue": "node_modules/content-disposition/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "body-parser", "version": "1.20.6", "description": "Node.js body parsing middleware", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/body-parser@1.20.6", "type": "library", "bom-ref": "pkg:npm/body-parser@1.20.6", "properties": [ { "name": "SrcFile", "value": "node_modules/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/package.json" } ], "concludedValue": "node_modules/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "accepts", "version": "1.3.8", "description": "Higher-level content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/accepts@1.3.8", "type": "library", "bom-ref": "pkg:npm/accepts@1.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/accepts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/accepts/package.json" } ], "concludedValue": "node_modules/accepts/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@bugsnag/plugin-aws-lambda@9.1.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.7", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-21T11:24:12Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'plugin-aws-lambda' with version '9.1.0'." } ] }