{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:b0e99bb4-2d23-4aa9-8c9d-8ec07e0fdac9",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-15T11:34:01Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "bun",
      "group": "",
      "version": "1.4.3",
      "description": "Bun is a fast all-in-one JavaScript runtime.",
      "purl": "pkg:npm/bun@1.4.3",
      "bom-ref": "pkg:npm/bun@1.4.3",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "bun, bunx"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:hasSuspiciousLifecycleScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:suspiciousLifecycleScripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:hasObfuscatedLifecycleScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:obfuscatedLifecycleScripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:lifecycleObfuscationIndicators",
          "value": "ast:string-from-char-code"
        },
        {
          "name": "cdx:npm:lifecycleExecutionIndicators",
          "value": "ast:child-process-import"
        },
        {
          "name": "cdx:npm:lifecycleNetworkIndicators",
          "value": "ast:network-request"
        },
        {
          "name": "cdx:npm:lifecycleIndicatorMap",
          "value": "postinstall:ast:string-from-char-code+ast:child-process-import+ast:network-request"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64, x64"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin, linux, android, freebsd, win32"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://bun.com"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@oven"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@oven",
      "name": "bun-darwin-aarch64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb6c0033d473ab21786da3b9a0556170551558ed4208c2c6eb20b9fda3d60981993df2f950b31b787b7ed3fdc8d21df268fc759be3ca48034effad633ed0d971"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-darwin-aarch64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-darwin-aarch64/-/bun-darwin-aarch64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-darwin-aarch64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-darwin-aarch64/-/bun-darwin-aarch64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-darwin-x64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1119e72258ec8ac86fc17d31eae02032aa839fbb38f950990a03c1652444d6db286d0e1f816b71203e7b15725172cc8c3b1341c9c69b289e88f5ee0dc73cafd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-darwin-x64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-darwin-x64/-/bun-darwin-x64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-darwin-x64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-darwin-x64/-/bun-darwin-x64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-linux-aarch64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca5a200c5c430fe69128ed1325abb00f309633ead42ef73ce6044d650f429d8eab9b6054e060b65d40e2db46e1ebb088b81e16b7fd0f2f5c69b09da1aa994cc3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-linux-aarch64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-linux-aarch64/-/bun-linux-aarch64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-linux-aarch64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-linux-aarch64/-/bun-linux-aarch64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-linux-x64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "440ae09e98de5e3686ce3a7987b46cf3d714609bad3bc232a91de2b44f0e05a07312df0a366da3a7f628cf1047ab8785a2fc2b40baf2792c1301c9a24fecdca0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-linux-x64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-linux-x64/-/bun-linux-x64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-linux-x64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-linux-x64/-/bun-linux-x64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-linux-aarch64-musl",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4e2486dc56ca59c4837fcd0b6b158c0bb8981a3a572219cca79b00adc0aca0d2b9971c9a0d1b4432b298a22e70d40e855348663f9eb9f44046d62a1bb441b11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-linux-aarch64-musl@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-linux-aarch64-musl/-/bun-linux-aarch64-musl-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-linux-aarch64-musl@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-linux-aarch64-musl/-/bun-linux-aarch64-musl-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-linux-x64-musl",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f48134e34e770baafed5b15ff688bcfb664e2f77debdc6a4606ed1a7b24995dccbcbf88260cd3c90af9ce6f061865929bf48efda6f6be79f819780fa26a066e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-linux-x64-musl@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-linux-x64-musl/-/bun-linux-x64-musl-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-linux-x64-musl@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-linux-x64-musl/-/bun-linux-x64-musl-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-linux-aarch64-android",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "282b180fe1c76b077ac61b7804e7df4e72d95cd7fec73abc979d8cb08176c91b487d4bc64c2ba676724f5f1ba8f7af625ee91bedc5adcfe58c92962528c1beb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-linux-aarch64-android@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-linux-aarch64-android/-/bun-linux-aarch64-android-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-linux-aarch64-android@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-linux-aarch64-android/-/bun-linux-aarch64-android-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-linux-x64-android",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4275cbc073e893a9ffe9e92d15928185f216ab28c8d37c490c397247b25c01ce5e46718e5a96d8759a4843dd3ed2a8b0396946a5f79bf37e2363a0065790f3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-linux-x64-android@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-linux-x64-android/-/bun-linux-x64-android-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-linux-x64-android@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-linux-x64-android/-/bun-linux-x64-android-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-freebsd-aarch64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf82e20d13d324c280f09bed3fe67e2399b5b3226bf0719815a8a7209a0201d91668733240c684118af437e1734cae29102507526b1c09335f0bd5c9c137b875"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-freebsd-aarch64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-freebsd-aarch64/-/bun-freebsd-aarch64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-freebsd-aarch64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-freebsd-aarch64/-/bun-freebsd-aarch64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-freebsd-x64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "629c069dfbed48c44c9e7562248e70086992e47a42040974c0b8417e525f99962480e1dfa65cde2949145435b66cd399cabca6dd837e10368b5a8a1a2695fc12"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-freebsd-x64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-freebsd-x64/-/bun-freebsd-x64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-freebsd-x64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-freebsd-x64/-/bun-freebsd-x64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-windows-x64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f69575eaa5c74c5bd90c7eb54bc8697695416d69af12a7a47332c5e78cd39d01ca3f6f03eb244234bac3ffb8d56d7611eb57d0600c78152060cc2c4608a6f7ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-windows-x64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-windows-x64/-/bun-windows-x64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-windows-x64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-windows-x64/-/bun-windows-x64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oven",
      "name": "bun-windows-aarch64",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7572bbd288d09f6f7c84befcb24c9a3588feab01a6987cbb447b77a4e6f986923aa65e3762d150b7d5ab3d777604114efaa0e9a581c4ebfd8c4e1197494001"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40oven/bun-windows-aarch64@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oven/bun-windows-aarch64/-/bun-windows-aarch64-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oven/bun-windows-aarch64@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oven/bun-windows-aarch64/-/bun-windows-aarch64-1.4.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@oven/bun-darwin-aarch64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-darwin-x64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-linux-aarch64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-linux-x64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-linux-aarch64-musl@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-linux-x64-musl@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-linux-aarch64-android@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-linux-x64-android@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-freebsd-aarch64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-freebsd-x64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-windows-x64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oven/bun-windows-aarch64@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bun@1.4.3",
      "dependsOn": [
        "pkg:npm/@oven/bun-darwin-aarch64@1.4.3",
        "pkg:npm/@oven/bun-darwin-x64@1.4.3",
        "pkg:npm/@oven/bun-freebsd-aarch64@1.4.3",
        "pkg:npm/@oven/bun-freebsd-x64@1.4.3",
        "pkg:npm/@oven/bun-linux-aarch64-android@1.4.3",
        "pkg:npm/@oven/bun-linux-aarch64-musl@1.4.3",
        "pkg:npm/@oven/bun-linux-aarch64@1.4.3",
        "pkg:npm/@oven/bun-linux-x64-android@1.4.3",
        "pkg:npm/@oven/bun-linux-x64-musl@1.4.3",
        "pkg:npm/@oven/bun-linux-x64@1.4.3",
        "pkg:npm/@oven/bun-windows-aarch64@1.4.3",
        "pkg:npm/@oven/bun-windows-x64@1.4.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/bun@1.4.3"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-15T11:34:01Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bun' with version '1.4.3'. The package type in this SBOM is npm with a single purl namespace '@oven' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}