{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2cf2bfa5-5a15-4e25-8885-8702a6f64b9f", "version": 1, "metadata": { "timestamp": "2026-10-18T19:29:08Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "element-selection", "group": "@cropper", "version": "2.3.1", "description": "A custom selection element for the Cropper.", "purl": "pkg:npm/%40cropper/element-selection@2.3.1", "bom-ref": "pkg:npm/@cropper/element-selection@2.3.1", "author": "Chen Fengyuan (https://chenfengyuan.com/)", "properties": [ { "name": "cdx:npm:scripts", "value": "api-extractor, build, clean, release, rollup, tsc" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/fengyuanchen/cropperjs/tree/main/packages/element-selection/#readme" }, { "type": "vcs", "url": "https://github.com/fengyuanchen/cropperjs.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@cropper" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@cropper", "name": "element", "version": "2.3.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "0a0acb3b1d2a1115a57c92b511de9e3eaed25dc07a80b1ed8f79ad0d5ca9cb3b62ef47c9766371ac59b951c6eaf2fa69d98a37b56d8beae0c8d08043a224f5ec" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cropper/element@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@cropper/element/-/element-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@cropper/element@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@cropper/element/-/element-2.3.1.tgz" }, { "name": "ImportedModules", "value": "@cropper/element" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/element-selection.esm.raw.js", "line": 1 }, { "location": "dist/element-selection.raw.js", "line": 2 }, { "location": "src/index.ts", "line": 1 } ] } }, { "group": "@cropper", "name": "utils", "version": "2.3.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6f9a854f0c2cfe8b31d1ab0818b2b557ffe174bd3c7eb1af7e98bab3ea7ace3e571f4e687d5733d1797e4e8b7bb14c75da96df861025b2ab904ce27522c3a817" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cropper/utils@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@cropper/utils/-/utils-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@cropper/utils@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@cropper/utils/-/utils-2.3.1.tgz" }, { "name": "ImportedModules", "value": "@cropper/utils,CROPPER_SELECTION,@cropper/utils/CROPPER_SELECTION,EVENT_CHANGE,@cropper/utils/EVENT_CHANGE,@cropper/utils/on,EVENT_KEYDOWN,@cropper/utils/EVENT_KEYDOWN,@cropper/utils/off,isPositiveNumber,@cropper/utils/isPositiveNumber,CROPPER_CANVAS,@cropper/utils/CROPPER_CANVAS,CROPPER_IMAGE,@cropper/utils/CROPPER_IMAGE,EVENT_ACTION_START,@cropper/utils/EVENT_ACTION_START,EVENT_ACTION_END,@cropper/utils/EVENT_ACTION_END,EVENT_ACTION,@cropper/utils/EVENT_ACTION,exceedsInset,@cropper/utils/exceedsInset,ACTION_SELECT,@cropper/utils/ACTION_SELECT,getOffset,@cropper/utils/getOffset,getComposedPathTarget,@cropper/utils/getComposedPathTarget,ACTION_SCALE,@cropper/utils/ACTION_SCALE,ACTION_TRANSFORM,@cropper/utils/ACTION_TRANSFORM,ACTION_MOVE,@cropper/utils/ACTION_MOVE,ACTION_RESIZE_NORTHWEST,@cropper/utils/ACTION_RESIZE_NORTHWEST,ACTION_RESIZE_SOUTHWEST,@cropper/utils/ACTION_RESIZE_SOUTHWEST,ACTION_RESIZE_NORTHEAST,@cropper/utils/ACTION_RESIZE_NORTHEAST,ACTION_RESIZE_SOUTHEAST,@cropper/utils/ACTION_RESIZE_SOUTHEAST,isNumber,@cropper/utils/isNumber,getAdjustedSizes,@cropper/utils/getAdjustedSizes,isPlainObject,@cropper/utils/isPlainObject,isFunction,@cropper/utils/isFunction,ACTION_RESIZE_WEST,@cropper/utils/ACTION_RESIZE_WEST,ACTION_RESIZE_EAST,@cropper/utils/ACTION_RESIZE_EAST,ACTION_RESIZE_SOUTH,@cropper/utils/ACTION_RESIZE_SOUTH,ACTION_RESIZE_NORTH,@cropper/utils/ACTION_RESIZE_NORTH" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/element-selection.esm.raw.js", "line": 2 }, { "location": "dist/element-selection.esm.raw.js", "line": 199 }, { "location": "dist/element-selection.esm.raw.js", "line": 200 }, { "location": "dist/element-selection.esm.raw.js", "line": 210 }, { "location": "dist/element-selection.esm.raw.js", "line": 214 }, { "location": "dist/element-selection.esm.raw.js", "line": 278 }, { "location": "dist/element-selection.esm.raw.js", "line": 279 }, { "location": "dist/element-selection.esm.raw.js", "line": 280 }, { "location": "dist/element-selection.esm.raw.js", "line": 290 }, { "location": "dist/element-selection.esm.raw.js", "line": 294 }, { "location": "dist/element-selection.esm.raw.js", "line": 298 }, { "location": "dist/element-selection.esm.raw.js", "line": 313 }, { "location": "dist/element-selection.esm.raw.js", "line": 330 }, { "location": "dist/element-selection.esm.raw.js", "line": 353 }, { "location": "dist/element-selection.esm.raw.js", "line": 354 }, { "location": "dist/element-selection.esm.raw.js", "line": 431 }, { "location": "dist/element-selection.esm.raw.js", "line": 432 }, { "location": "dist/element-selection.esm.raw.js", "line": 435 }, { "location": "dist/element-selection.esm.raw.js", "line": 465 }, { "location": "dist/element-selection.esm.raw.js", "line": 491 }, { "location": "dist/element-selection.esm.raw.js", "line": 494 }, { "location": "dist/element-selection.esm.raw.js", "line": 500 }, { "location": "dist/element-selection.esm.raw.js", "line": 512 }, { "location": "dist/element-selection.esm.raw.js", "line": 553 }, { "location": "dist/element-selection.esm.raw.js", "line": 673 }, { "location": "dist/element-selection.esm.raw.js", "line": 882 }, { "location": "dist/element-selection.esm.raw.js", "line": 893 }, { "location": "dist/element-selection.esm.raw.js", "line": 914 }, { "location": "dist/element-selection.esm.raw.js", "line": 915 }, { "location": "dist/element-selection.esm.raw.js", "line": 916 }, { "location": "dist/element-selection.esm.raw.js", "line": 917 }, { "location": "dist/element-selection.esm.raw.js", "line": 922 }, { "location": "dist/element-selection.esm.raw.js", "line": 923 }, { "location": "dist/element-selection.esm.raw.js", "line": 1023 }, { "location": "dist/element-selection.esm.raw.js", "line": 1024 }, { "location": "dist/element-selection.esm.raw.js", "line": 1025 }, { "location": "dist/element-selection.esm.raw.js", "line": 1065 }, { "location": "dist/element-selection.raw.js", "line": 2 }, { "location": "src/index.ts", "line": 35 }, { "location": "src/index.ts", "line": 282 }, { "location": "src/index.ts", "line": 283 }, { "location": "src/index.ts", "line": 294 }, { "location": "src/index.ts", "line": 297 }, { "location": "src/index.ts", "line": 376 }, { "location": "src/index.ts", "line": 377 }, { "location": "src/index.ts", "line": 378 }, { "location": "src/index.ts", "line": 389 }, { "location": "src/index.ts", "line": 394 }, { "location": "src/index.ts", "line": 399 }, { "location": "src/index.ts", "line": 421 }, { "location": "src/index.ts", "line": 450 }, { "location": "src/index.ts", "line": 476 }, { "location": "src/index.ts", "line": 477 }, { "location": "src/index.ts", "line": 571 }, { "location": "src/index.ts", "line": 572 }, { "location": "src/index.ts", "line": 576 }, { "location": "src/index.ts", "line": 617 }, { "location": "src/index.ts", "line": 649 }, { "location": "src/index.ts", "line": 653 }, { "location": "src/index.ts", "line": 660 }, { "location": "src/index.ts", "line": 673 }, { "location": "src/index.ts", "line": 725 }, { "location": "src/index.ts", "line": 885 }, { "location": "src/index.ts", "line": 1135 }, { "location": "src/index.ts", "line": 1148 }, { "location": "src/index.ts", "line": 1180 }, { "location": "src/index.ts", "line": 1181 }, { "location": "src/index.ts", "line": 1182 }, { "location": "src/index.ts", "line": 1183 }, { "location": "src/index.ts", "line": 1190 }, { "location": "src/index.ts", "line": 1191 }, { "location": "src/index.ts", "line": 1319 }, { "location": "src/index.ts", "line": 1320 }, { "location": "src/index.ts", "line": 1321 }, { "location": "src/index.ts", "line": 1371 } ] } }, { "group": "@cropper", "name": "element-canvas", "version": "2.3.1", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "507dd53328e7e7c3ddc1890f8931eebd15231b39b22abe84da9616c53c4dff4e309e38182c0efb079bb97351e157abc3d59292bf127f8bd4e48b2491f4fd43e8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cropper/element-canvas@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@cropper/element-canvas/-/element-canvas-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@cropper/element-canvas@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@cropper/element-canvas/-/element-canvas-2.3.1.tgz" }, { "name": "ImportedModules", "value": "@cropper/element-canvas" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/index.ts", "line": 2 } ] } }, { "group": "@cropper", "name": "element-image", "version": "2.3.1", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "acf13b397fc13d3c3aebe0e3a4de5a3ae3dbd714808d03200096577518267899e7d187030e17c6426f15c1c2fcfcf30bc6d58570a10cf9a5227b36ced358f87e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cropper/element-image@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@cropper/element-image/-/element-image-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@cropper/element-image@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@cropper/element-image/-/element-image-2.3.1.tgz" }, { "name": "ImportedModules", "value": "@cropper/element-image" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/index.ts", "line": 3 } ] } } ], "dependencies": [ { "ref": "pkg:npm/@cropper/utils@2.3.1", "dependsOn": [] }, { "ref": "pkg:npm/@cropper/element@2.3.1", "dependsOn": [ "pkg:npm/@cropper/utils@2.3.1" ] }, { "ref": "pkg:npm/@cropper/element-canvas@2.3.1", "dependsOn": [ "pkg:npm/@cropper/element@2.3.1", "pkg:npm/@cropper/utils@2.3.1" ] }, { "ref": "pkg:npm/@cropper/element-image@2.3.1", "dependsOn": [ "pkg:npm/@cropper/element-canvas@2.3.1", "pkg:npm/@cropper/element@2.3.1", "pkg:npm/@cropper/utils@2.3.1" ] }, { "ref": "pkg:npm/@cropper/element-selection@2.3.1", "dependsOn": [ "pkg:npm/@cropper/element-canvas@2.3.1", "pkg:npm/@cropper/element-image@2.3.1", "pkg:npm/@cropper/element@2.3.1", "pkg:npm/@cropper/utils@2.3.1" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@cropper/element-selection@2.3.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-18T19:29:08Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'element-selection' with version '2.3.1'. The package type in this SBOM is npm with a single purl namespace '@cropper' described under components. The components were identified from the source files: package-lock.json." } ] }