{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ed9c73c0-d115-4612-a3c5-0efa91b06c52", "version": 1, "metadata": { "timestamp": "2026-10-12T21:45:41Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "weval", "group": "@bytecodealliance", "version": "0.5.1", "description": "The WebAssembly partial evaluator", "purl": "pkg:npm/%40bytecodealliance/weval@0.5.1", "bom-ref": "pkg:npm/@bytecodealliance/weval@0.5.1", "properties": [ { "name": "cdx:npm:scripts", "value": "version" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/bytecodealliance/weval#readme" }, { "type": "vcs", "url": "git+https://github.com/bytecodealliance/weval.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@emnapi\\n@isaacs\\n@napi-rs\\n@tybys" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@napi-rs", "name": "lzma", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "b20399f3dfb2f1c0db63edd66f347c0ad2210ae1515a8b59f7fd8f8cf543247cfa9e9e4a15301ebf40ebc22c93253805b0244385f1a56e684c8328476d6759ea" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma/-/lzma-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma/-/lzma-1.5.1.tgz" }, { "name": "ImportedModules", "value": "@napi-rs/lzma/xz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 12 }, { "location": "index.js", "line": 20 } ] } }, { "group": "@napi-rs", "name": "lzma-android-arm-eabi", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "b1a8417b8928d99ebd34f4dd75a5fa6606d066ef520e8213c70d52ddd5a5d60006ca7646df8a871c24fc51a50c1717f7877ccc842263133cf86dab1a071893b9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-android-arm-eabi@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-android-arm-eabi/-/lzma-android-arm-eabi-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-android-arm-eabi@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-android-arm-eabi/-/lzma-android-arm-eabi-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-android-arm64", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "eed91000926e047c40c621013458124e9bebb46a5bc1961825448e98610adce7db75b35ea13dab741c6933f818d6cfa2b4455bb4e4a5a5a44f3c6d7d327c0ecc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-android-arm64@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-android-arm64/-/lzma-android-arm64-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-android-arm64@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-android-arm64/-/lzma-android-arm64-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-darwin-arm64", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "5d65fc82d17e1871a4de71f75a6dd051935cc70f501ec155673dcccd52e15961e171e79d7b5278fef0feddd8f713588a07d1ba9ae6a5699c4ea03d3c47713eee" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-darwin-arm64@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-darwin-arm64/-/lzma-darwin-arm64-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-darwin-arm64@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-darwin-arm64/-/lzma-darwin-arm64-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-darwin-x64", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "09fb2a529313235cfc7a7ac0fdbf8670733a60323c0f492a0a2a8f6049ecb78adb380050f4a67ddb26d34cd9e59d9ec0d35ed6a0c64a50459cdfa2970f08b4c6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-darwin-x64@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-darwin-x64/-/lzma-darwin-x64-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-darwin-x64@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-darwin-x64/-/lzma-darwin-x64-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-freebsd-x64", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6d3c8d7e0f7415722013ad54ee5d7868c9953aa450e80c8fe49313de39824ad699235f1aa4b34f77367c8bbcaac597cabd13157cf8c4d9bad7230dbb73e45180" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-freebsd-x64@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-freebsd-x64/-/lzma-freebsd-x64-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-freebsd-x64@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-freebsd-x64/-/lzma-freebsd-x64-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-arm-gnueabihf", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "bcd13e0fc9ebc3e78e901b1d282b260e1a300d5de920c29712179dbd77db82b59baceec6959247f915cbf97f9160bc46c22f189bad5932dd79b083a736687d4b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-arm-gnueabihf@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm-gnueabihf/-/lzma-linux-arm-gnueabihf-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-arm-gnueabihf@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm-gnueabihf/-/lzma-linux-arm-gnueabihf-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-arm64-gnu", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "72c51e9b85a0a0a193a6bbffa4e3e6f542166dbfa1adf53061779fa531cf00419514b9796de84415a6e2b09ec5b628426b7c86d847dc97ecb0db9ae5861ac863" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-arm64-gnu@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-gnu/-/lzma-linux-arm64-gnu-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-arm64-gnu@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-gnu/-/lzma-linux-arm64-gnu-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-arm64-musl", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "901ff186554dd5e2ef5660c948a6448e9e46836c4361ec4dac1e63c2948c6ce91e192e8df406ac0723c183956a0a93180becd98bb0cce39f03461b56621a974d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-arm64-musl@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-musl/-/lzma-linux-arm64-musl-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-arm64-musl@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-musl/-/lzma-linux-arm64-musl-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-ppc64-gnu", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "b36f115b45b5c815907359db3dd17bb69d78928aac958dd958b548f2e69a9d7dbdd8373a7b377834f570c44a0234154e37fa03ec19946d61adc85be69bb750e4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-ppc64-gnu@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-ppc64-gnu/-/lzma-linux-ppc64-gnu-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-ppc64-gnu@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-ppc64-gnu/-/lzma-linux-ppc64-gnu-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-riscv64-gnu", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "fa518dc18948375e183cc4cdbd8b48249a8715ebc34dde89bb0ff53665db5b1fe245dfcb2eb8e194cff296e317ea9c6ce8d90e1acbae117249adb6c4512e7d39" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-riscv64-gnu@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-riscv64-gnu/-/lzma-linux-riscv64-gnu-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-riscv64-gnu@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-riscv64-gnu/-/lzma-linux-riscv64-gnu-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-s390x-gnu", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3c1e3814559616b2de428c2171ea7584f0f561c2ea2a59e763ad11314ef8aabc5396be18184cb378c22d26a876ba2bc17eff6441270e17f07427df9569bfe8cb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-s390x-gnu@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-s390x-gnu/-/lzma-linux-s390x-gnu-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-s390x-gnu@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-s390x-gnu/-/lzma-linux-s390x-gnu-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-x64-gnu", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a135c42216b84acb97753038232b248f4929771db255776177be5cdafdf11ab1c57d532c6e14cf654fe730f2f8b162a8e290479b76ae70b6aa1a517af7a753c9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-x64-gnu@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-gnu/-/lzma-linux-x64-gnu-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-x64-gnu@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-gnu/-/lzma-linux-x64-gnu-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-linux-x64-musl", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "2379ec62b5adad6f49a5e0abfa69092150edd076379baa95501b39bd3b6822f250c70a9fd4f0574b2e484bb4f9de4b10147da4776517f2b2f127b0785884a966" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-linux-x64-musl@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-musl/-/lzma-linux-x64-musl-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-linux-x64-musl@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-musl/-/lzma-linux-x64-musl-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-wasm32-wasi", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "832df0c0f05aebe5c4c80e1f533aba08296b5c0d5a8d78ee55fe736e71f2b49460a07ce78fe9afa54dfe728d9fc57c2a4c2988a67e8aaf3a87e5b443ced04f84" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-wasm32-wasi@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-wasm32-wasi/-/lzma-wasm32-wasi-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-wasm32-wasi@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-wasm32-wasi/-/lzma-wasm32-wasi-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@emnapi", "name": "core", "version": "1.11.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4c2f0c913b9952d7134a215eb82d24b0287d408279f85db532f6785a7e0e45f61a149ff476c8ae76fe6d5647a3830665c10dfd8cbf565837b6973f31d1682538" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40emnapi/core@1.11.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@emnapi/core@1.11.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@emnapi", "name": "wasi-threads", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "73de6a39790777274d2a1b1c05379ba840b5095019a72a8e7d57c1cd0d6a833ca5de07de95d5232208036c86600cab072e09ec33e8a01fb4c9fde01ab1a56e30" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40emnapi/wasi-threads@1.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@emnapi/wasi-threads@1.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tslib", "version": "2.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0916ef781d06fe29576e49440bef09e99aa9df98bb0e03f9c087a6fa107d30084a0ad3f98f79753a737c0a0d5f373243ae1cf447b525ca294f7d2016b34bfdb" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@2.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@emnapi", "name": "runtime", "version": "1.11.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9323a5dd7d03b93893d61d9fb7caf67d83bc258b54f5af578acff305288602b35a6a008e5b1f74375936c31a75f1ccc50c7f8e81c5866f964ffd732dddd7323c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40emnapi/runtime@1.11.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@emnapi/runtime@1.11.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "wasm-runtime", "version": "1.2.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "50c76e31ba8ee6ce7317636435a70c4ffc8ae58e5088abd6af6fb9d1bcc8231143c15276878f5bfa8ca368218f849c5ddbf802db1dfd107bff80756ebb7eb1d9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/wasm-runtime@1.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.2.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@tybys", "name": "wasm-util", "version": "0.10.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1777e8d4c62b44960bdf3111d0e50e9a4bad8ebd55a76de6eceb12829ee7ab848fe8ea97e82ff9e971483c09796eddf3681463996ed21b3deeffa2f016961c3a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tybys/wasm-util@0.10.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tybys/wasm-util@0.10.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-win32-arm64-msvc", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "74afa1b8eb078b21faa098e28fe7278ea1426a49361e05a6a48d765e6e292d4c8fa617b879b62824181e85a340c69ae68c5a8143b9cbf7960f573f411f2aa63e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-win32-arm64-msvc@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-win32-arm64-msvc/-/lzma-win32-arm64-msvc-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-win32-arm64-msvc@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-win32-arm64-msvc/-/lzma-win32-arm64-msvc-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-win32-ia32-msvc", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "74613c2fed0443e1b253d6a9f489ea07fb7f3e63c6fdb2e3f75f2aeceb09dbd16e4dd9fc7cae0e5f7538210661ca51c803efdd43f497264e67e327da8765d5bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-win32-ia32-msvc@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-win32-ia32-msvc/-/lzma-win32-ia32-msvc-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-win32-ia32-msvc@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-win32-ia32-msvc/-/lzma-win32-ia32-msvc-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@napi-rs", "name": "lzma-win32-x64-msvc", "version": "1.5.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "10a5b8b7f8aa7424ffc67779b7da172ef54447f3cc3405972aa5009777e0bd470e20b79920886defbfdd5677c571cf61b40fc30815c2ffa61059d5be2eeb2314" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40napi-rs/lzma-win32-x64-msvc@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@napi-rs/lzma-win32-x64-msvc/-/lzma-win32-x64-msvc-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@napi-rs/lzma-win32-x64-msvc@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@napi-rs/lzma-win32-x64-msvc/-/lzma-win32-x64-msvc-1.5.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fflate", "version": "0.8.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "b5b64db89acbc06529df3b2106d772e16f8e47166e221f1ae629722044030b9ad8d5fdd4db424caf2d0b977581cd4e7c1192ac12e2455e16f9830bfc0ac3ef80" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fflate@0.8.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fflate/-/fflate-0.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fflate@0.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fflate/-/fflate-0.8.3.tgz" }, { "name": "ImportedModules", "value": "fflate,unzipSync,fflate/unzipSync" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 11 }, { "location": "index.js", "line": 30 } ] } }, { "group": "", "name": "tar", "version": "7.5.22", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3053bf433bed00e9896e484e6824ef6c670537d2fd6fe26e9c8b03c1a2a58d239d70b31e6b7349d64f54b33feb8dd7d25d3ab875fcdf792ed6e29e1838000778" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@7.5.22", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tar@7.5.22", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz" }, { "name": "ImportedModules", "value": "tar" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 10 }, { "location": "index.js", "line": 23 } ] } }, { "group": "@isaacs", "name": "fs-minipass", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c209bd1219768e97aa3f7cf0ffb9a8de4447169e4c10386a01dc32d5f4c69070309e418e56c829bd084bf01e67d6a95bd358d5de7fdb23465f669e65580d64e3" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minipass", "version": "7.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b44047a839c8a0cff5ad7304d738246bd83a43695ca029311cbb9cece0c9e41c5b3f977873667970682d5c092ee7ddb4d02c7b762b874ce61f4810fc9fa9a6f0" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chownr", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f88c7363d05939077f5ee60f466aef1158c5fe7aa3e64813e2412aed5a1fac3a0cd4cc6846311692b082dc4b4b8b9f5355ac314c09fea2b27015072ba84375fa" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chownr@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minizlib", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "299c58a350549160f64d514baf4310a0cf2f5148a0583dcb943f376bfef906a0bee2a1341dbd55a39bf516071f68d5ef7d7cebfb912143a8a783f09a0628d397" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@3.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@3.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yallist", "version": "5.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "620bd44dfc2ac9ced45d532b07e4889ac5584a64d2f17fed4abb5d35930898cfa7efe413ae2457c978a6d2606b4d735eab3545d0a5868073de8b2562145acd0f" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@5.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yallist@5.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@napi-rs/lzma-android-arm-eabi@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-android-arm64@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-darwin-arm64@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-darwin-x64@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-freebsd-x64@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-arm-gnueabihf@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-arm64-gnu@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-arm64-musl@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-ppc64-gnu@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-riscv64-gnu@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-s390x-gnu@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-x64-gnu@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-linux-x64-musl@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/tslib@2.8.1", "dependsOn": [] }, { "ref": "pkg:npm/@emnapi/wasi-threads@1.2.2", "dependsOn": [ "pkg:npm/tslib@2.8.1" ] }, { "ref": "pkg:npm/@emnapi/core@1.11.2", "dependsOn": [ "pkg:npm/@emnapi/wasi-threads@1.2.2", "pkg:npm/tslib@2.8.1" ] }, { "ref": "pkg:npm/@emnapi/runtime@1.11.2", "dependsOn": [ "pkg:npm/tslib@2.8.1" ] }, { "ref": "pkg:npm/@tybys/wasm-util@0.10.3", "dependsOn": [ "pkg:npm/tslib@2.8.1" ] }, { "ref": "pkg:npm/@napi-rs/wasm-runtime@1.2.3", "dependsOn": [ "pkg:npm/@emnapi/core@1.11.2", "pkg:npm/@emnapi/runtime@1.11.2", "pkg:npm/@tybys/wasm-util@0.10.3" ] }, { "ref": "pkg:npm/@napi-rs/lzma-wasm32-wasi@1.5.1", "dependsOn": [ "pkg:npm/@emnapi/core@1.11.2", "pkg:npm/@emnapi/runtime@1.11.2", "pkg:npm/@napi-rs/wasm-runtime@1.2.3" ] }, { "ref": "pkg:npm/@napi-rs/lzma-win32-arm64-msvc@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-win32-ia32-msvc@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma-win32-x64-msvc@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/@napi-rs/lzma@1.5.1", "dependsOn": [ "pkg:npm/@napi-rs/lzma-android-arm-eabi@1.5.1", "pkg:npm/@napi-rs/lzma-android-arm64@1.5.1", "pkg:npm/@napi-rs/lzma-darwin-arm64@1.5.1", "pkg:npm/@napi-rs/lzma-darwin-x64@1.5.1", "pkg:npm/@napi-rs/lzma-freebsd-x64@1.5.1", "pkg:npm/@napi-rs/lzma-linux-arm-gnueabihf@1.5.1", "pkg:npm/@napi-rs/lzma-linux-arm64-gnu@1.5.1", "pkg:npm/@napi-rs/lzma-linux-arm64-musl@1.5.1", "pkg:npm/@napi-rs/lzma-linux-ppc64-gnu@1.5.1", "pkg:npm/@napi-rs/lzma-linux-riscv64-gnu@1.5.1", "pkg:npm/@napi-rs/lzma-linux-s390x-gnu@1.5.1", "pkg:npm/@napi-rs/lzma-linux-x64-gnu@1.5.1", "pkg:npm/@napi-rs/lzma-linux-x64-musl@1.5.1", "pkg:npm/@napi-rs/lzma-wasm32-wasi@1.5.1", "pkg:npm/@napi-rs/lzma-win32-arm64-msvc@1.5.1", "pkg:npm/@napi-rs/lzma-win32-ia32-msvc@1.5.1", "pkg:npm/@napi-rs/lzma-win32-x64-msvc@1.5.1" ] }, { "ref": "pkg:npm/fflate@0.8.3", "dependsOn": [] }, { "ref": "pkg:npm/minipass@7.1.3", "dependsOn": [] }, { "ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "dependsOn": [ "pkg:npm/minipass@7.1.3" ] }, { "ref": "pkg:npm/chownr@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/minizlib@3.1.0", "dependsOn": [ "pkg:npm/minipass@7.1.3" ] }, { "ref": "pkg:npm/yallist@5.0.0", "dependsOn": [] }, { "ref": "pkg:npm/tar@7.5.22", "dependsOn": [ "pkg:npm/@isaacs/fs-minipass@4.0.1", "pkg:npm/chownr@3.0.0", "pkg:npm/minipass@7.1.3", "pkg:npm/minizlib@3.1.0", "pkg:npm/yallist@5.0.0" ] }, { "ref": "pkg:npm/@bytecodealliance/weval@0.5.1", "dependsOn": [ "pkg:npm/@napi-rs/lzma@1.5.1", "pkg:npm/fflate@0.8.3", "pkg:npm/tar@7.5.22" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@bytecodealliance/weval@0.5.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-12T21:45:41Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, October 12, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'weval' with version '0.5.1'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }