{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:3e9122ca-52d9-406e-b5a1-03ce72146e8b", "version": 1, "metadata": { "timestamp": "2026-10-21T11:40:56Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.7", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "compliance", "group": "@celo", "version": "1.0.28", "description": "", "purl": "pkg:npm/%40celo/compliance@1.0.28", "bom-ref": "pkg:npm/@celo/compliance@1.0.28", "author": "", "properties": [ { "name": "cdx:npm:scripts", "value": "test, clean, build:esm, build:cjs, build, update_ofac_list" }, { "name": "cdx:npm:buildScripts", "value": "build:esm, build:cjs, build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/celo-org/compliance" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@cspotcode\\n@jridgewell\\n@tsconfig\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "bun.lock\\npackage-lock.json" } ] }, "components": [ { "group": "@types", "name": "bun", "version": "1.2.6", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "7d8f420264dd247d4b971eebba00741698162b644ab870acde0d9c14361752eb48cb540688f4312a4198f28c217d9e0c5d635fc7021b40b0a1807e600ec63bbf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/bun@1.2.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/bun/-/bun-1.2.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/bun@1.2.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/bun/-/bun-1.2.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/bun" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "bun-types", "version": "1.2.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "15b08acabe4a0e23d42d4ccdfe79b9a2a42cf675c21c3f1d55ceb8040af125a742bdb373008ea55161a1f5f4896567832110f7f2291c78153c2a3fd487ee77a1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bun-types@1.2.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/bun-types/-/bun-types-1.2.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bun-types@1.2.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/bun-types/-/bun-types-1.2.6.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "node", "version": "22.13.13", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "0a5b0be6733029a051c0f702bc7f04efe9d4e06c47571d5ac4dbcc6531473047cd23ba1a8629addba3f9ce354246b8e22168fa6055df135bf7744a7de302dc19" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@22.13.13", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-22.13.13.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@22.13.13", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-22.13.13.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/node" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "undici-types", "version": "6.20.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "372e90676363bb6d2fc354911dedddf6356eea027ee1edfe30ca6abbba6a1391d3e96b134a571efbe19098ae545d2f26cd5f034981eb407f97adfda355cb8a36" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici-types@6.20.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/undici-types@6.20.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "ws", "version": "8.5.14", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "6ddfd814b5be511841ccc5eeaf1ee5581c8ebbec7353dfa46f745ba0eb5e5d80df5beb6bf8965af7d3b23663c8344181fda8732ab12e73cadcbf8827a499b14f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/ws@8.5.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/ws/-/ws-8.5.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/ws@8.5.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/ws/-/ws-8.5.14.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/ws" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "fast-xml-parser", "version": "5.0.9", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "da60700a2b96df270a410e9239eb1207c59e17e7c819be88fc61b9bd4e7f5c4a6dc05161a7d3c4f1bf4eedf6ecd9da6af5f5e7e142d1dd4b1fc9d3540a7b5fe4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-xml-parser@5.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-xml-parser@5.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.0.9.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/fxparser" }, { "name": "cdx:npm:bin", "value": "fxparser" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "fast-xml-parser,XMLParser,fast-xml-parser/XMLParser" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ], "occurrences": [ { "location": "scripts/get-latest-sanctions.ts", "line": 6 } ] }, "tags": [ "parse" ] }, { "group": "", "name": "strnum", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6004f72bfb20a4253187134caeb761b687778dc924a58c07e8902ec2651d5d9b26cc7d70532cd332bacadb0602104aa52b0ad60dddf935eb9491b072ff588af9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strnum@2.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strnum/-/strnum-2.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strnum@2.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strnum/-/strnum-2.0.5.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "rss-parser", "version": "3.13.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ee3594055e7218ddeba8c323ec266e7e5ff6f7540086faeb1a90cd13893fd3665c84bd27a62b22618a942c5ef58c210aa08887bcafd0d9ee88903c0fce24fbfb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rss-parser@3.13.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rss-parser/-/rss-parser-3.13.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rss-parser@3.13.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rss-parser/-/rss-parser-3.13.0.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "entities", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a7dda27f9373eb5f48d30f9a909acb647d0c5f43dbe435f7f573b0413b5749d41039a607d374b5b88429e2684e66d017af1ab85623baed84e22c1a36eb7f28f4" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@2.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@2.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "xml2js", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "76b3c59e44098a4fcefae3caa6a4a0af6da6a6e147a8a75b4bcdf988042b502ef72f61795a46e821177adda8bfd9883a2358f389f3c5287d8d4caf9c7e096420" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xml2js@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/xml2js@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] }, "tags": [ "xml" ] }, { "group": "", "name": "sax", "version": "1.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f9a58ecfbc9549c106a0a35de0f035d0b67cb24d00ff3e7e9d7406e608943b9ae9ad7f63818b13768bfda827216623c865ecdb647fa346eb7c9cfa1d1405f826" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sax@1.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz" } ], "type": "framework", "bom-ref": "pkg:npm/sax@1.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "xmlbuilder", "version": "11.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7c396c23f905131ee02ef6de71cd3fa212c6e747ee810a7caf21f3313b96f6f49ad462745d858a9e1b14c7ba227b71bdf3eaf9e9a4d0214078921b78d91dc9bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xmlbuilder@11.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/xmlbuilder@11.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] }, "tags": [ "xml" ] }, { "group": "", "name": "ts-node", "version": "10.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7f4145a4875c1e09fccdc3d26dfd5d45ebf0b74e3b60c9da889337bb6c3645ec2b07e7e86ffcde3d972b3b24282cc30eeda04875d2dc40810ae5d62390b9c6ad" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ts-node@10.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ts-node/-/ts-node-10.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ts-node@10.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ts-node/-/ts-node-10.9.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/ts-node, /app/node_modules/.bin/ts-node-cwd, /app/node_modules/.bin/ts-node-esm, /app/node_modules/.bin/ts-node-script, /app/node_modules/.bin/ts-node-transpile-only, /app/node_modules/.bin/ts-script" }, { "name": "cdx:npm:bin", "value": "ts-node, ts-node-cwd, ts-node-esm, ts-node-script, ts-node-transpile-only, ts-script" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "typescript", "version": "5.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6899fac2ad77fda7d9a7f8d3f50666c048c3aaabd21a9d554f919583e7ffb7afe8572ae05cce8163587d05187f3b9a773e550f01ef96ba21193a66ffe3d46aa1" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.8.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-5.8.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.8.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-5.8.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/tsc, /app/node_modules/.bin/tsserver" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@cspotcode", "name": "source-map-support", "version": "0.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "21c84d7fa74de2d1e8305227ffb384f0b599d7d63aabfebb0667fabe719112ff1149b0556fd2cf27111c9f0adcc17ea2c52bda886a2898052fbb8612c57ad583" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cspotcode/source-map-support@0.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@cspotcode/source-map-support/-/source-map-support-0.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@cspotcode/source-map-support@0.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@cspotcode/source-map-support/-/source-map-support-0.8.1.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dc17a5b7ab5d73c6cf800b5b72676d349962ad5a139846f97b6802f783e7930116f6323a0801d47a81bce6d8d63f95aabaa7dabe832d330886e0ff76e9928ab9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.9.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "82fdd945a2125377e33c080db2b88146a19640beaab85c74e1830f5bfcc3f1730bb14df69a10826df6cee8a6452e3bd8a4267ccf20c482ab207fe3f03da33b19" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@tsconfig", "name": "node10", "version": "1.0.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0dc4630c2ba32bf90293f7147bc5f3f194a99bc992de634da6d6be8c6080e944840df92d94dbe6d7e22e67d7937036cd938d411f0a471de5be37594a0b3e333b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node10@1.0.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node10@1.0.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.11.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@tsconfig", "name": "node12", "version": "1.0.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "72a79fb91b21d76a56c86b08a0128903d96e16ede6471080f8e459bc0e24b4b4b322e094b56571188b978a01303b9ff2c1614c67640418a5af9191b5cc33136a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node12@1.0.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@tsconfig/node12/-/node12-1.0.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node12@1.0.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@tsconfig/node12/-/node12-1.0.11.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@tsconfig", "name": "node14", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cac4fc9a1762c562ba1f0de2d55d80791a99e567d78351b8de6aa86253369dceb7f3c16ae63717cabe6646ca9588bc7f18961da0bd1b7d70fc9e617e667fc8a3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node14@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@tsconfig/node14/-/node14-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node14@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@tsconfig/node14/-/node14-1.0.3.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@tsconfig", "name": "node16", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bf1854cb827c9727b28a71fb033975a5d778dc6261647fed3f6c1e37c4e7b506e5398f80d176d3f03264d7fa023ee38eca0fc96bbe7bac6d028077160bc39f30" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node16@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@tsconfig/node16/-/node16-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node16@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@tsconfig/node16/-/node16-1.0.4.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "acorn", "version": "8.14.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3af43fda95032a681f0a0fbec6c4d7d701b17d36accdc1d571372d5b85090788626c9c761d7c713b9526560ca331af990ec89a7f9c162d7629456326048d101e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@8.14.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn/-/acorn-8.14.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.14.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn/-/acorn-8.14.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/acorn" }, { "name": "cdx:npm:bin", "value": "acorn" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "acorn-walk", "version": "8.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b9e11ea67ba3a6a79eda8e5a2189ef1d4e82d00e3630d76c2037aacb907276b92e0b947566e5059e6dbb11e1491a8107250827dee95e46f9935da2607d76ede2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-walk@8.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@8.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "arg", "version": "4.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e7c4bd403a86d17c76ed8c0f4adf5f2718af8d8978df6602c1f0cc7d9fbbd5102a52b65e7fb2eb2906772c72cec024b814b341a653f9df7671f3de5278e087bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/arg@4.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/arg/-/arg-4.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/arg@4.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/arg/-/arg-4.1.3.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "create-require", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "75c2855f78e7d0ca486978e2b2846f7b12095442b36aaef3dab64ac5ff8c4abf5391d9879ac5389b695c2e88eb8ff14797c9a4e55c4c99803e7ed4643ffde829" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/create-require@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/create-require/-/create-require-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/create-require@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/create-require/-/create-require-1.1.1.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "diff", "version": "4.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@4.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "make-error", "version": "1.3.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b3c52194d7bbbcf2a8990842d6a15e94ca24aff49cdc080d6eca379fbe2654f0392d3670901f4d9577f85cf6a62f1244f21d2087bdeb33de31bf0453d825489f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-error@1.3.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/make-error/-/make-error-1.3.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/make-error@1.3.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/make-error/-/make-error-1.3.6.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "v8-compile-cache-lib", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c1aed88f25067cd667808fefb4ad141c037e9600c2c413c2ca55571a9d33bb9f45cf96a21ad3576aadc3848a2fd3adcca2b07e55fb9f2e1dc9945d8a7532b7c6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/v8-compile-cache-lib@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/v8-compile-cache-lib/-/v8-compile-cache-lib-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/v8-compile-cache-lib@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/v8-compile-cache-lib/-/v8-compile-cache-lib-3.0.1.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "yn", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "531e328065acbb673b8ac1567bc62ed5896e266a95871a8ad9c2d735003901c0b741f6c636933b7eed18f1bff3d7aa572e7171658bd685dddf84163d0cb982e9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yn@3.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yn/-/yn-3.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yn@3.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yn/-/yn-3.1.1.tgz" }, { "name": "SrcFile", "value": "bun.lock" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "75261987b1e1083b422a6e106a45f4c45a6c443aa38ed65ffe48c8fefdd3dcdc2de6bf3fab3fccd7d17dc92c8ea94f78497066786f6db53ba5f989d1e0b3b114" } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.1.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.4.15", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "785dabc4246e9442971d34620eb0f2e9eacc616a8dc382cf750f14400e21baec5a42c55e44f165da833ca031b130584951665ff4c7292ed25ab030d96ff0697a" } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.15.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.15.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@tsconfig", "name": "node10", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8cdb18555c54f2fe60e3712b8dadf695a2031d77a836f144a57df738ae1dea1963a378c3842043871e5d8420933165288ec72901a8068919012b1a5d97d7f1a8" } ], "purl": "pkg:npm/%40tsconfig/node10@1.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node10@1.0.9", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@tsconfig/node10/-/node10-1.0.9.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@types", "name": "bun", "version": "1.2.5", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "c363994f3ad94d5b5b9c97b0d697459a057df47d3f2fe3efc3ecf53faec7691d7c3073b36274d83a2eaacc4ae12bc1f24fe0c1efcd800d53cf13dd97bb6fcea6" } ], "purl": "pkg:npm/%40types/bun@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/bun/-/bun-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/bun@1.2.5", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/bun/-/bun-1.2.5.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "@types", "name": "node", "version": "20.8.7", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "db54ca1c78777941c88b6325a1ea6d25600bb82bb91fb1d04dd4eb588151780f1a77e6a08285fe9517acddec7bfc5b690beb1552914c43e4137d8afbe26aee89" } ], "purl": "pkg:npm/%40types/node@20.8.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-20.8.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.8.7", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-20.8.7.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "acorn", "version": "8.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "174480999f2252d4bffe6f039824c0d23961e930ca9074322bac5ce95e0a0d3c99280f5d9ef5fdff7b114d542b5a6efd82550065b9e698d71d6305081d65726f" } ], "purl": "pkg:npm/acorn@8.10.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn/-/acorn-8.10.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.10.0", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn/-/acorn-8.10.0.tgz" }, { "name": "cdx:npm:bin", "value": "bin/acorn" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "acorn-walk", "version": "8.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93e8b21c4b8f812c3a49bb83a4640cfb4e874146b4e03677a3e17a092cd732fbc8e4a32f9da12a5def9855ee79e51f679fa18fb78d387e8b38c1c829c35d920c" } ], "purl": "pkg:npm/acorn-walk@8.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@8.2.0", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "bun-types", "version": "1.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de83ba2d5186451288e241c8371e4f21d2209cb45bee5fd2a6b873a976a99a8624165e66e23e84bc02ef6c356eb8115a6a6078e80a7a1c253121734b086cbeb6" } ], "purl": "pkg:npm/bun-types@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/bun-types/-/bun-types-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bun-types@1.2.5", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/bun-types/-/bun-types-1.2.5.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } }, { "group": "", "name": "sax", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d2cfa8026c3dccb975575712f41b5937b240774716e5ed101f85b72d610ae9ae0b68b100d8e4e919858363ee976ac04bb73eb0926deed71470f79991b89e7d58" } ], "purl": "pkg:npm/sax@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sax/-/sax-1.3.0.tgz" } ], "type": "framework", "bom-ref": "pkg:npm/sax@1.3.0", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sax/-/sax-1.3.0.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "undici-types", "version": "5.25.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "19ad637d8c119fbf9c3fdbfc6aebc45cdd6b5f7b16aa56b27781cfece2a4e26656ca5126bb72b35c3506ad050de8e97baa8d603ef0767b9817eae767c843e074" } ], "purl": "pkg:npm/undici-types@5.25.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/undici-types/-/undici-types-5.25.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/undici-types@5.25.3", "properties": [ { "name": "SrcFile", "value": "bun.lock" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/undici-types/-/undici-types-5.25.3.tgz" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bun.lock" } ], "concludedValue": "bun.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/undici-types@6.20.0", "dependsOn": [] }, { "ref": "pkg:npm/@types/node@22.13.13", "dependsOn": [ "pkg:npm/undici-types@6.20.0" ] }, { "ref": "pkg:npm/@types/ws@8.5.14", "dependsOn": [ "pkg:npm/@types/node@20.8.7", "pkg:npm/@types/node@22.13.13" ] }, { "ref": "pkg:npm/bun-types@1.2.6", "dependsOn": [ "pkg:npm/@types/node@22.13.13", "pkg:npm/@types/ws@8.5.14" ] }, { "ref": "pkg:npm/@types/bun@1.2.6", "dependsOn": [ "pkg:npm/bun-types@1.2.6" ] }, { "ref": "pkg:npm/strnum@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/fast-xml-parser@5.0.9", "dependsOn": [ "pkg:npm/strnum@2.0.5" ] }, { "ref": "pkg:npm/entities@2.2.0", "dependsOn": [] }, { "ref": "pkg:npm/sax@1.4.1", "dependsOn": [] }, { "ref": "pkg:npm/xmlbuilder@11.0.1", "dependsOn": [] }, { "ref": "pkg:npm/xml2js@0.5.0", "dependsOn": [ "pkg:npm/sax@1.3.0", "pkg:npm/sax@1.4.1", "pkg:npm/xmlbuilder@11.0.1" ] }, { "ref": "pkg:npm/rss-parser@3.13.0", "dependsOn": [ "pkg:npm/entities@2.2.0", "pkg:npm/xml2js@0.5.0" ] }, { "ref": "pkg:npm/typescript@5.8.2", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.0", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9", "dependsOn": [ "pkg:npm/@jridgewell/resolve-uri@3.1.1", "pkg:npm/@jridgewell/resolve-uri@3.1.2", "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "pkg:npm/@jridgewell/sourcemap-codec@1.5.0" ] }, { "ref": "pkg:npm/@cspotcode/source-map-support@0.8.1", "dependsOn": [ "pkg:npm/@jridgewell/trace-mapping@0.3.9" ] }, { "ref": "pkg:npm/@tsconfig/node10@1.0.11", "dependsOn": [] }, { "ref": "pkg:npm/@tsconfig/node12@1.0.11", "dependsOn": [] }, { "ref": "pkg:npm/@tsconfig/node14@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/@tsconfig/node16@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/acorn@8.14.1", "dependsOn": [] }, { "ref": "pkg:npm/acorn-walk@8.3.4", "dependsOn": [ "pkg:npm/acorn@8.14.1" ] }, { "ref": "pkg:npm/arg@4.1.3", "dependsOn": [] }, { "ref": "pkg:npm/create-require@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/diff@4.0.2", "dependsOn": [] }, { "ref": "pkg:npm/make-error@1.3.6", "dependsOn": [] }, { "ref": "pkg:npm/v8-compile-cache-lib@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/yn@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/ts-node@10.9.2", "dependsOn": [ "pkg:npm/@cspotcode/source-map-support@0.8.1", "pkg:npm/@tsconfig/node10@1.0.11", "pkg:npm/@tsconfig/node10@1.0.9", "pkg:npm/@tsconfig/node12@1.0.11", "pkg:npm/@tsconfig/node14@1.0.3", "pkg:npm/@tsconfig/node16@1.0.4", "pkg:npm/@types/node@20.8.7", "pkg:npm/@types/node@22.13.13", "pkg:npm/acorn-walk@8.2.0", "pkg:npm/acorn-walk@8.3.4", "pkg:npm/acorn@8.10.0", "pkg:npm/acorn@8.14.1", "pkg:npm/arg@4.1.3", "pkg:npm/create-require@1.1.1", "pkg:npm/diff@4.0.2", "pkg:npm/make-error@1.3.6", "pkg:npm/typescript@5.8.2", "pkg:npm/v8-compile-cache-lib@3.0.1", "pkg:npm/yn@3.1.1" ] }, { "ref": "pkg:npm/@celo/compliance@1.0.28", "dependsOn": [ "pkg:npm/@types/bun@1.2.6", "pkg:npm/fast-xml-parser@5.0.9", "pkg:npm/rss-parser@3.13.0", "pkg:npm/ts-node@10.9.2", "pkg:npm/typescript@5.8.2" ] }, { "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "dependsOn": [] }, { "ref": "pkg:npm/@tsconfig/node10@1.0.9", "dependsOn": [] }, { "ref": "pkg:npm/@types/bun@1.2.5", "dependsOn": [ "pkg:npm/bun-types@1.2.5" ] }, { "ref": "pkg:npm/@types/node@20.8.7", "dependsOn": [ "pkg:npm/undici-types@5.25.3" ] }, { "ref": "pkg:npm/acorn@8.10.0", "dependsOn": [] }, { "ref": "pkg:npm/acorn-walk@8.2.0", "dependsOn": [] }, { "ref": "pkg:npm/bun-types@1.2.5", "dependsOn": [ "pkg:npm/@types/node@20.8.7", "pkg:npm/@types/ws@8.5.14" ] }, { "ref": "pkg:npm/sax@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/undici-types@5.25.3", "dependsOn": [] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@celo/compliance@1.0.28" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.7", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-21T11:40:56Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'compliance' with version '1.0.28'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: bun.lock, package-lock.json." } ] }