{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:ea498da1-5948-44e9-97a0-89019a942441",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-21T17:59:19Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.7",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "repack-dev-server",
      "group": "@callstack",
      "version": "5.4.1",
      "description": "A bundler-agnostic development server for React Native applications as part of @callstack/repack.",
      "purl": "pkg:npm/%40callstack/repack-dev-server@5.4.1",
      "bom-ref": "pkg:npm/@callstack/repack-dev-server@5.4.1",
      "author": "zamotany <zamotany.oss@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, typecheck, test, test:watch, archive"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/callstack/repack"
        },
        {
          "type": "vcs",
          "url": "https://github.com/callstack/repack.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@babel\\n@fastify\\n@react-native\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@fastify/middie/package.json\\nnode_modules/@fastify/sensible/package.json\\nnode_modules/@react-native/dev-middleware/package.json\\nnode_modules/@types/babel__code-frame/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/ws/package.json\\nnode_modules/fastify-favicon/package.json\\nnode_modules/fastify-plugin/package.json\\nnode_modules/fastify/package.json\\nnode_modules/http-proxy-middleware/package.json\\nnode_modules/launch-editor/package.json\\nnode_modules/open/package.json\\nnode_modules/pretty-format/package.json\\nnode_modules/source-map/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json\\nnode_modules/ws/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)"
        }
      ],
      "group": "",
      "name": "ws",
      "version": "8.21.1",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ws@8.21.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/websockets/ws"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/websockets/ws.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.21.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ws/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "ws,WebSocketServer,ws/WebSocketServer,WebSocket,ws/WebSocket,ServerOptions,ws/ServerOptions"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ws/package.json"
              }
            ],
            "concludedValue": "node_modules/ws/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/wss/WebSocketServer.js",
            "line": 1
          },
          {
            "location": "src/plugins/wss/WebSocketServer.ts",
            "line": 4
          },
          {
            "location": "src/plugins/wss/WebSocketServerAdapter.ts",
            "line": 4
          },
          {
            "location": "src/plugins/wss/servers/WebSocketDevClientServer.ts",
            "line": 3
          },
          {
            "location": "src/plugins/wss/servers/WebSocketEventsServer.ts",
            "line": 4
          },
          {
            "location": "src/plugins/wss/servers/WebSocketMessageServer.ts",
            "line": 4
          },
          {
            "location": "src/plugins/wss/types.ts",
            "line": 3
          },
          {
            "location": "src/plugins/wss/wssPlugin.ts",
            "line": 3
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Anthony Fu <anthonyfu117@hotmail.com>"
        }
      ],
      "group": "",
      "name": "vitest",
      "version": "4.1.10",
      "description": "Next generation testing framework powered by Vite",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vitest@4.1.10",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://vitest.dev"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitest-dev/vitest.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/vitest@4.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vitest/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vitest/package.json"
              }
            ],
            "concludedValue": "node_modules/vitest/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "7.0.2",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@7.0.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@7.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.7.6",
      "description": "Generates and consumes source maps",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.7.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "source-map,SourceMapConsumer,source-map/SourceMapConsumer,RawIndexMap,source-map/RawIndexMap,RawSourceMap,source-map/RawSourceMap"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/symbolicate/Symbolicator.js",
            "line": 3
          },
          {
            "location": "src/plugins/symbolicate/Symbolicator.ts",
            "line": 4
          },
          {
            "location": "src/utils/symbolication.ts",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Kyle <me@thejameskyle.com>"
        }
      ],
      "group": "",
      "name": "pretty-format",
      "version": "28.1.3",
      "description": "Stringify any JavaScript value.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pretty-format@28.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/facebook/jest.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-format@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pretty-format/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "pretty-format"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pretty-format/package.json"
              }
            ],
            "concludedValue": "node_modules/pretty-format/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/wss/servers/WebSocketEventsServer.js",
            "line": 1
          },
          {
            "location": "src/plugins/wss/servers/WebSocketEventsServer.ts",
            "line": 3
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "open",
      "version": "10.2.0",
      "description": "Open stuff like URLs, files, executables. Cross-platform.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/open@10.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/open@10.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/open/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "open"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/open/package.json"
              }
            ],
            "concludedValue": "node_modules/open/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/devtools/devtoolsPlugin.js",
            "line": 3
          },
          {
            "location": "dist/plugins/devtools/devtoolsPlugin.js",
            "line": 19
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 4
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 33
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evan You"
        }
      ],
      "group": "",
      "name": "launch-editor",
      "version": "2.14.1",
      "description": "launch editor from node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/launch-editor@2.14.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/vitejs/launch-editor#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitejs/launch-editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/launch-editor@2.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/launch-editor/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "launch-editor"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/launch-editor/package.json"
              }
            ],
            "concludedValue": "node_modules/launch-editor/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/devtools/devtoolsPlugin.js",
            "line": 2
          },
          {
            "location": "dist/plugins/devtools/devtoolsPlugin.js",
            "line": 33
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 3
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 53
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steven Chim"
        }
      ],
      "group": "",
      "name": "http-proxy-middleware",
      "version": "3.0.7",
      "description": "The one-liner node.js proxy middleware for connect, express, next.js and more",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-middleware@3.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chimurai/http-proxy-middleware#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/chimurai/http-proxy-middleware.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-middleware@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-proxy-middleware/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "http-proxy-middleware,createProxyMiddleware,http-proxy-middleware/createProxyMiddleware,Options,http-proxy-middleware/Options"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-proxy-middleware/package.json"
              }
            ],
            "concludedValue": "node_modules/http-proxy-middleware/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/createServer.js",
            "line": 6
          },
          {
            "location": "dist/createServer.js",
            "line": 114
          },
          {
            "location": "src/createServer.ts",
            "line": 6
          },
          {
            "location": "src/createServer.ts",
            "line": 119
          },
          {
            "location": "src/types.ts",
            "line": 5
          },
          {
            "location": "src/utils/normalizeOptions.ts",
            "line": 3
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "authors": [
        {
          "name": "Tomas Della Vedova - @delvedor (http://delved.org)"
        }
      ],
      "group": "",
      "name": "fastify-plugin",
      "version": "5.1.0",
      "description": "Plugin helper for Fastify",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fastify-plugin@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fastify/fastify-plugin#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/fastify/fastify-plugin.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastify-plugin@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fastify-plugin/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fastify-plugin"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fastify-plugin/package.json"
              }
            ],
            "concludedValue": "node_modules/fastify-plugin/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/compiler/compilerPlugin.js",
            "line": 1
          },
          {
            "location": "dist/plugins/compiler/compilerPlugin.js",
            "line": 57
          },
          {
            "location": "dist/plugins/devtools/devtoolsPlugin.js",
            "line": 1
          },
          {
            "location": "dist/plugins/devtools/devtoolsPlugin.js",
            "line": 47
          },
          {
            "location": "dist/plugins/favicon/faviconPlugin.js",
            "line": 4
          },
          {
            "location": "dist/plugins/favicon/faviconPlugin.js",
            "line": 10
          },
          {
            "location": "dist/plugins/multipart/multipartPlugin.js",
            "line": 2
          },
          {
            "location": "dist/plugins/multipart/multipartPlugin.js",
            "line": 55
          },
          {
            "location": "dist/plugins/symbolicate/sybmolicatePlugin.js",
            "line": 1
          },
          {
            "location": "dist/plugins/symbolicate/sybmolicatePlugin.js",
            "line": 42
          },
          {
            "location": "dist/plugins/wss/wssPlugin.js",
            "line": 1
          },
          {
            "location": "dist/plugins/wss/wssPlugin.js",
            "line": 45
          },
          {
            "location": "src/plugins/compiler/compilerPlugin.ts",
            "line": 2
          },
          {
            "location": "src/plugins/compiler/compilerPlugin.ts",
            "line": 83
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 2
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 69
          },
          {
            "location": "src/plugins/favicon/faviconPlugin.ts",
            "line": 5
          },
          {
            "location": "src/plugins/favicon/faviconPlugin.ts",
            "line": 14
          },
          {
            "location": "src/plugins/multipart/multipartPlugin.ts",
            "line": 4
          },
          {
            "location": "src/plugins/multipart/multipartPlugin.ts",
            "line": 77
          },
          {
            "location": "src/plugins/symbolicate/sybmolicatePlugin.ts",
            "line": 2
          },
          {
            "location": "src/plugins/symbolicate/sybmolicatePlugin.ts",
            "line": 59
          },
          {
            "location": "src/plugins/wss/wssPlugin.ts",
            "line": 2
          },
          {
            "location": "src/plugins/wss/wssPlugin.ts",
            "line": 93
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sandro Martini <sandro.martini@gmail.com>"
        }
      ],
      "group": "",
      "name": "fastify-favicon",
      "version": "5.0.0",
      "description": "Fastify plugin to serve default favicon requests",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fastify-favicon@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/smartiniOnGitHub/fastify-favicon#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/smartiniOnGitHub/fastify-favicon.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastify-favicon@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fastify-favicon/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fastify-favicon"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fastify-favicon/package.json"
              }
            ],
            "concludedValue": "node_modules/fastify-favicon/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/favicon/faviconPlugin.js",
            "line": 3
          },
          {
            "location": "src/plugins/favicon/faviconPlugin.ts",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matteo Collina <hello@matteocollina.com>"
        }
      ],
      "group": "",
      "name": "fastify",
      "version": "5.10.0",
      "description": "Fast and low overhead web framework, for Node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fastify@5.10.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://fastify.dev/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/fastify/fastify.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/fastify@5.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fastify/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fastify,FastifyInstance,fastify/FastifyInstance,FastifyReply,fastify/FastifyReply,FastifyBaseLogger,fastify/FastifyBaseLogger,FastifyRequest,fastify/FastifyRequest"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fastify/package.json"
              }
            ],
            "concludedValue": "node_modules/fastify/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/createServer.js",
            "line": 5
          },
          {
            "location": "dist/createServer.js",
            "line": 27
          },
          {
            "location": "src/createServer.ts",
            "line": 5
          },
          {
            "location": "src/createServer.ts",
            "line": 30
          },
          {
            "location": "src/plugins/api/apiPlugin.ts",
            "line": 1
          },
          {
            "location": "src/plugins/compiler/compilerPlugin.ts",
            "line": 1
          },
          {
            "location": "src/plugins/devtools/devtoolsPlugin.ts",
            "line": 1
          },
          {
            "location": "src/plugins/favicon/faviconPlugin.ts",
            "line": 3
          },
          {
            "location": "src/plugins/multipart/multipartPlugin.ts",
            "line": 3
          },
          {
            "location": "src/plugins/symbolicate/Symbolicator.ts",
            "line": 3
          },
          {
            "location": "src/plugins/symbolicate/logSymbolicatedStackFrame.ts",
            "line": 1
          },
          {
            "location": "src/plugins/symbolicate/sybmolicatePlugin.ts",
            "line": 1
          },
          {
            "location": "src/plugins/wss/WebSocketRouter.ts",
            "line": 3
          },
          {
            "location": "src/plugins/wss/WebSocketServer.ts",
            "line": 3
          },
          {
            "location": "src/plugins/wss/WebSocketServerAdapter.ts",
            "line": 3
          },
          {
            "location": "src/plugins/wss/servers/WebSocketApiServer.ts",
            "line": 1
          },
          {
            "location": "src/plugins/wss/servers/WebSocketDevClientServer.ts",
            "line": 2
          },
          {
            "location": "src/plugins/wss/servers/WebSocketEventsServer.ts",
            "line": 2
          },
          {
            "location": "src/plugins/wss/servers/WebSocketHMRServer.ts",
            "line": 1
          },
          {
            "location": "src/plugins/wss/servers/WebSocketMessageServer.ts",
            "line": 3
          },
          {
            "location": "src/plugins/wss/wssPlugin.ts",
            "line": 1
          },
          {
            "location": "src/types.ts",
            "line": 4
          }
        ]
      },
      "tags": [
        "framework",
        "web"
      ]
    },
    {
      "group": "@types",
      "name": "ws",
      "version": "8.18.1",
      "description": "TypeScript definitions for ws",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/ws@8.18.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ws@8.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/ws/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/ws/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/ws/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "20.19.43",
      "description": "TypeScript definitions for node",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@20.19.43",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@20.19.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/node/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/node/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "babel__code-frame",
      "version": "7.27.0",
      "description": "TypeScript definitions for @babel/code-frame",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/babel__code-frame@7.27.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__code-frame"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/babel__code-frame@7.27.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/babel__code-frame/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/babel__code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/babel__code-frame/package.json"
          }
        ]
      }
    },
    {
      "group": "@react-native",
      "name": "dev-middleware",
      "version": "0.86.1",
      "description": "Dev server middleware for React Native",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40react-native/dev-middleware@0.86.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react-native/tree/HEAD/packages/dev-middleware#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/facebook/react-native.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@react-native/dev-middleware@0.86.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@react-native/dev-middleware/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@react-native/dev-middleware"
        },
        {
          "name": "cdx:npm:package:type-only",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@react-native/dev-middleware/package.json"
              }
            ],
            "concludedValue": "node_modules/@react-native/dev-middleware/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/types.ts",
            "line": 3
          },
          {
            "location": "src/utils/normalizeOptions.ts",
            "line": 2
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "authors": [
        {
          "name": "Tomas Della Vedova - @delvedor (http://delved.org)"
        }
      ],
      "group": "@fastify",
      "name": "sensible",
      "version": "6.0.4",
      "description": "Defaults for Fastify that everyone can agree on",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40fastify/sensible@6.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fastify/fastify-sensible#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/fastify/fastify-sensible.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fastify/sensible@6.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@fastify/sensible/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@fastify/sensible"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@fastify/sensible/package.json"
              }
            ],
            "concludedValue": "node_modules/@fastify/sensible/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/createServer.js",
            "line": 4
          },
          {
            "location": "src/createServer.ts",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matteo Collina <hello@matteocollina.com>"
        }
      ],
      "group": "@fastify",
      "name": "middie",
      "version": "9.3.3",
      "description": "Middleware engine for Fastify",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40fastify/middie@9.3.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fastify/middie#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/fastify/middie.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fastify/middie@9.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@fastify/middie/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@fastify/middie"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@fastify/middie/package.json"
              }
            ],
            "concludedValue": "node_modules/@fastify/middie/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/createServer.js",
            "line": 3
          },
          {
            "location": "src/createServer.ts",
            "line": 3
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "code-frame",
      "version": "7.29.7",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-code-frame"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/code-frame/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@babel/code-frame,codeFrameColumns,@babel/code-frame/codeFrameColumns"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/code-frame/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/plugins/symbolicate/Symbolicator.js",
            "line": 2
          },
          {
            "location": "dist/plugins/symbolicate/Symbolicator.js",
            "line": 186
          },
          {
            "location": "src/plugins/symbolicate/Symbolicator.ts",
            "line": 2
          },
          {
            "location": "src/plugins/symbolicate/Symbolicator.ts",
            "line": 247
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@callstack/repack-dev-server@5.4.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.7",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-21T17:59:19Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'repack-dev-server' with version '5.4.1'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 18 source files."
    }
  ]
}