{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2fada0ef-ee36-4bc2-a0ba-709b11a48ccd", "version": 1, "metadata": { "timestamp": "2026-10-21T10:20:20Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.7", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "plugin-koa", "group": "@bugsnag", "version": "9.1.0", "description": "@bugsnag/js error handling middleware for Koa web servers", "purl": "pkg:npm/%40bugsnag/plugin-koa@9.1.0", "bom-ref": "pkg:npm/@bugsnag/plugin-koa@9.1.0", "author": "Bugsnag", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://www.bugsnag.com/" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@bugsnag\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@bugsnag", "name": "core", "version": "9.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "031bb3c8ba198136c4619c9b43486c6c895097ab85b85861f8021bc015fa9932c3c1b2eb88f6edcdbcde17529071ef16b89169ea21123d71c16146d4c48bdcb3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bugsnag/core@9.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bugsnag/core/-/core-9.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bugsnag/core@9.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bugsnag/core/-/core-9.1.0.tgz" }, { "name": "ImportedModules", "value": "@bugsnag/core/lib/clone-client" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/koa.js", "line": 1 } ] } }, { "group": "@bugsnag", "name": "cuid", "version": "3.2.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "ee89ee60b4cca8c98713d0413c6d18111e2716c535ac1fa67b5fd821e32eb2a70b6d56ca2ae1bdbbdf810d50e98dee5ed2596492b54d38a6309b333d0d1228ec" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bugsnag/cuid@3.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bugsnag/cuid/-/cuid-3.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bugsnag/cuid@3.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bugsnag/cuid/-/cuid-3.2.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bugsnag", "name": "safe-json-stringify", "version": "6.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "226037e6b9ccedb1abf89df447defd150f79061441e143b529f240d09dac56a73c9f09eb4bd8611399a44e641632cf158750dafa190b2ace63241e098cd669e0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bugsnag/safe-json-stringify@6.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bugsnag/safe-json-stringify/-/safe-json-stringify-6.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bugsnag/safe-json-stringify@6.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bugsnag/safe-json-stringify/-/safe-json-stringify-6.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "error-stack-parser", "version": "2.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-stack-parser@2.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/error-stack-parser@2.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "stackframe", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stackframe@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stackframe@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "iserror", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0a186ac555a5b01138a63f74a25b08c3798dbba2f668c993c7b716e50b8842abd7d7c5e77f8dab31f804d61458c25524599e0f154ccb0dd670e71a8eb33014b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iserror@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/iserror/-/iserror-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/iserror@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/iserror/-/iserror-0.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "stack-generator", "version": "2.0.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9b09ee6bf864a8cea917893c4a7999db37c44ec454a565d111f03f8284fc48b095e223856b86f3397da70e2a5601914f4e32ef401f367f9c9aa1d31584ad3225" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stack-generator@2.0.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/stack-generator/-/stack-generator-2.0.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stack-generator@2.0.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/stack-generator/-/stack-generator-2.0.10.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "koa", "version": "2.13.4", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "75f1d831f53ecffbcab5007b354aed85d004892be72de6ef063c07b5f166a59981ede9b637759541d1e09c5abec6fc958315b98ca0e68d67cb0f7970e20e2e4f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/koa@2.13.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/koa/-/koa-2.13.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/koa@2.13.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/koa/-/koa-2.13.4.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/koa" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "accepts", "version": "1.3.7", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "3dacbd7eada5336c173d66ed781b110068961f6862838644d9ab0afa69bb914ce5c514df2fdeb5ae3f3d23acd5fc4dcf708903ab2b8111c331153eeb71cba079" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/accepts@1.3.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/accepts/-/accepts-1.3.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/accepts@1.3.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/accepts/-/accepts-1.3.7.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/accepts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "node", "version": "26.6.5", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "b8ccecbfdb2d0dda1f219071e141a1e19f598179c60bdb1e443b1c8a505c4c701e38593aecc660fe4f5b5957cef9b938a99986fa5e768519cbc14887d8b9c94e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@26.6.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-26.6.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@26.6.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-26.6.5.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/node" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "undici-types", "version": "8.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2930f2453617f2c5a629702290f1c74b273adc244f11331cb728ca16ea5c0ba3812d74f7c6c3747bd685ee6fa6217bad156a545ee79db68c06ee22cece9d2442" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici-types@8.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/undici-types@8.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "content-disposition", "version": "0.5.9", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "f2e6172371b0df93218956211b7b36f79a2286bc51cb2b5c4478d28ea9ea6550c3cbfc5c181467cbbf978f55a07e1bf943346d376841d9d5510545fd5d6dd471" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/content-disposition@0.5.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/content-disposition/-/content-disposition-0.5.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/content-disposition@0.5.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/content-disposition/-/content-disposition-0.5.9.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/content-disposition" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "cookies", "version": "0.9.2", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "d40be40dd64cd9d6f21726cbe1fc69b8d09a5b2bffff4030b2e524d8359e5f2335ff964a9ba5b7cfa9908b6e11678976b9c63e6e4487cdb0d5a724aa3c6b95f0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/cookies@0.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/cookies/-/cookies-0.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/cookies@0.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/cookies/-/cookies-0.9.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/cookies" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "connect", "version": "3.4.38", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "2bab9139fd4b0fcf2e0d0a890a4b40e32ccbd586002ba3607ec234bff9938323ca5ac5f50a72745cf48385589e8ebbb519c4642d66fc465cc560946a1946daba" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/connect@3.4.38", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/connect@3.4.38", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/connect" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "express", "version": "5.0.6", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "b0a615b95ed2bfd7db3c8b7fe38da4a02efe208c0ae6894fd4a59e0fcf1efe2760a09a839b7255fd85223f092828af76ca57dfd8c1b14b3d424a3b177a5c7460" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/express@5.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/express/-/express-5.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/express@5.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/express/-/express-5.0.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/express" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "body-parser", "version": "1.19.6", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "1cb15e098833f3dba4db6379420dddbc6becbf8e81f062ef28aa35cca1b83726c0f14d838843b7c3d96a1a0dbdb7fb5f2d126927a890c67570e0e9c1ecca0cf6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/body-parser@1.19.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/body-parser@1.19.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/body-parser" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "@types", "name": "express-serve-static-core", "version": "5.1.3", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "74f7d6f0d162385e3038773bf8dfd04b1958f5c7d2b1e9dec066c0cfc0bc53f3142cf77f619dbb2ef254225cda5e27bb7ba3af7bd62e9c91a00bdb5b1c3d9c2b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/express-serve-static-core@5.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-5.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/express-serve-static-core@5.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-5.1.3.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/express-serve-static-core" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "qs", "version": "6.15.1", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "1991d405947d85c912521af19a9d671ba37076933d7c2ba7270c9384b5b55f70321e077d2251dbe9500da5042a0ebda8fea429e8c719df2fc8036ad5ccacd26f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/qs@6.15.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/qs@6.15.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/qs" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "range-parser", "version": "1.2.7", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "84aa2b9896e426acd01a1ce26b1e4f22d0d44cc00cf6e1365d7426337eddc9de2154cfb969597ba15c4c554895427da809014dfcb28265dbd2334a4546a6d299" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/range-parser@1.2.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/range-parser@1.2.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/range-parser" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "@types", "name": "send", "version": "1.2.1", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "6abb028a40ef954f7dce5d60ebd4dc001de6cd93e9c60c345109da1de0b53706f4d79c69f1b92766fe6b21fae2f714ce70cb9a560bda6df21103b3d2655b9921" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/send@1.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/send/-/send-1.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/send@1.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/send/-/send-1.2.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/send" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "serve-static", "version": "2.2.0", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "f266a6e07d4d1cbb6eee79ad6a517b7b2047d784323804a67311e149f128472af49cffd87687ac12d53eb9246f31ef7a4d6fc73d3b64a0aa902e5e7737b51731" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/serve-static@2.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/serve-static/-/serve-static-2.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/serve-static@2.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/serve-static/-/serve-static-2.2.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/serve-static" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "http-errors", "version": "2.0.5", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "afc4daca4f072675f4173b5b64dee856a19c716830f7c4ffd27789a613bdd4a9263b3ba0d4a9287d95110f851a0f9b87f00a9c14b7dd3c4ae7068774bbbd7faa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/http-errors@2.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/http-errors@2.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.5.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/http-errors" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "keygrip", "version": "1.0.6", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "959b8d018f71789b7b071e2de1dc74ad8083a863d6f115e14192b5b5dedde07e84f7361b2e83ad8c1bdfc1d4caa6ccb1408ff68eff9aae68d7fd15be64da5739" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/keygrip@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/keygrip/-/keygrip-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/keygrip@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/keygrip/-/keygrip-1.0.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/keygrip" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "http-assert", "version": "1.5.6", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "4d31309ad8e055b600cd9616c9e1cfaebb569df5649bcb5090ff0fdb5b9089f3e0311823ae8c375c3118aae72e0bc48a6494fba549e153f2729af8e08313bdbf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/http-assert@1.5.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/http-assert/-/http-assert-1.5.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/http-assert@1.5.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/http-assert/-/http-assert-1.5.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/http-assert" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "koa-compose", "version": "3.2.9", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "06ba0067d153bcf882cb43e2f2d8c3d4e7c9edb814d6041fd1e47a7b5566f892404f2f5e28e1b7850305b4c72231ac2248e5672cc76650e0b8eacec7061493b0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/koa-compose@3.2.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/koa-compose/-/koa-compose-3.2.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/koa-compose@3.2.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/koa-compose/-/koa-compose-3.2.9.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/koa-compose" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@bugsnag/cuid@3.2.2", "dependsOn": [] }, { "ref": "pkg:npm/@bugsnag/safe-json-stringify@6.1.0", "dependsOn": [] }, { "ref": "pkg:npm/stackframe@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/error-stack-parser@2.1.4", "dependsOn": [ "pkg:npm/stackframe@1.3.4" ] }, { "ref": "pkg:npm/iserror@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/stack-generator@2.0.10", "dependsOn": [ "pkg:npm/stackframe@1.3.4" ] }, { "ref": "pkg:npm/@bugsnag/core@9.1.0", "dependsOn": [ "pkg:npm/@bugsnag/cuid@3.2.2", "pkg:npm/@bugsnag/safe-json-stringify@6.1.0", "pkg:npm/error-stack-parser@2.1.4", "pkg:npm/iserror@0.0.2", "pkg:npm/stack-generator@2.0.10" ] }, { "ref": "pkg:npm/undici-types@8.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@types/node@26.6.5", "dependsOn": [ "pkg:npm/undici-types@8.9.0" ] }, { "ref": "pkg:npm/@types/accepts@1.3.7", "dependsOn": [ "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@types/content-disposition@0.5.9", "dependsOn": [] }, { "ref": "pkg:npm/@types/connect@3.4.38", "dependsOn": [ "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@types/body-parser@1.19.6", "dependsOn": [ "pkg:npm/@types/connect@3.4.38", "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@types/qs@6.15.1", "dependsOn": [] }, { "ref": "pkg:npm/@types/range-parser@1.2.7", "dependsOn": [] }, { "ref": "pkg:npm/@types/send@1.2.1", "dependsOn": [ "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@types/express-serve-static-core@5.1.3", "dependsOn": [ "pkg:npm/@types/node@26.6.5", "pkg:npm/@types/qs@6.15.1", "pkg:npm/@types/range-parser@1.2.7", "pkg:npm/@types/send@1.2.1" ] }, { "ref": "pkg:npm/@types/http-errors@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/@types/serve-static@2.2.0", "dependsOn": [ "pkg:npm/@types/http-errors@2.0.5", "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@types/express@5.0.6", "dependsOn": [ "pkg:npm/@types/body-parser@1.19.6", "pkg:npm/@types/express-serve-static-core@5.1.3", "pkg:npm/@types/serve-static@2.2.0" ] }, { "ref": "pkg:npm/@types/keygrip@1.0.6", "dependsOn": [] }, { "ref": "pkg:npm/@types/cookies@0.9.2", "dependsOn": [ "pkg:npm/@types/connect@3.4.38", "pkg:npm/@types/express@5.0.6", "pkg:npm/@types/keygrip@1.0.6", "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@types/http-assert@1.5.6", "dependsOn": [] }, { "ref": "pkg:npm/@types/koa-compose@3.2.9", "dependsOn": [ "pkg:npm/@types/koa@2.13.4" ] }, { "ref": "pkg:npm/@types/koa@2.13.4", "dependsOn": [ "pkg:npm/@types/accepts@1.3.7", "pkg:npm/@types/content-disposition@0.5.9", "pkg:npm/@types/cookies@0.9.2", "pkg:npm/@types/http-assert@1.5.6", "pkg:npm/@types/http-errors@2.0.5", "pkg:npm/@types/keygrip@1.0.6", "pkg:npm/@types/koa-compose@3.2.9", "pkg:npm/@types/node@26.6.5" ] }, { "ref": "pkg:npm/@bugsnag/plugin-koa@9.1.0", "dependsOn": [ "pkg:npm/@bugsnag/core@9.1.0", "pkg:npm/@types/koa@2.13.4" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@bugsnag/plugin-koa@9.1.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.7", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-21T10:20:20Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'plugin-koa' with version '9.1.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }