{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:389d4f8f-a4f4-4866-8737-458dcb903c4c", "version": 1, "metadata": { "timestamp": "2026-10-18T17:34:06Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "postcss-media-minmax", "group": "@csstools", "version": "3.0.8", "description": "Use the range notation in CSS media queries", "purl": "pkg:npm/%40csstools/postcss-media-minmax@3.0.8", "bom-ref": "pkg:npm/@csstools/postcss-media-minmax@3.0.8", "properties": [ { "name": "cdx:npm:scripts", "value": "build, docs, lint, prepublishOnly, test, test:rewrite-expects" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/csstools/postcss-plugins/tree/main/plugins/postcss-media-minmax#readme" }, { "type": "vcs", "url": "git+https://github.com/csstools/postcss-plugins.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@csstools\\n@puppeteer" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "postcss", "version": "8.5.30", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "ce477e7bd4b50101e199a04ac9ef739451d68cec1582a5e5d6adc4098cbce7ad4aeeac51d9c4447ff4932ec92e94115defc93a00e15e03e7dfd53b44ce4f5b00" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss@8.5.30", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/postcss/-/postcss-8.5.30.tgz" } ], "type": "library", "bom-ref": "pkg:npm/postcss@8.5.30", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/postcss/-/postcss-8.5.30.tgz" }, { "name": "ImportedModules", "value": "postcss,PluginCreator,postcss/PluginCreator" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/index.ts", "line": 1 } ] } }, { "group": "", "name": "nanoid", "version": "3.3.20", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b8a760d86dc63422909fd6f260ea716c6aab4f67c63b9291b7927ff1bde9a24f2b4faab119617a871332262118b407fe155c98b83f6145a0ea5f9b8f15827865" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nanoid@3.3.20", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nanoid@3.3.20", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/plugins/postcss-media-minmax/node_modules/.bin/nanoid" }, { "name": "cdx:npm:bin", "value": "nanoid" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "picocolors", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map-js", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2868fff18e37c77e5a6550edb7e27898ad61a0b18750b3187d290e0c93508cd0c2de85b53ea3e8c4cc28d292d4b1633f5041b338dfcdc5e1f2c047cd5cd3f757" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-js@1.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map-js@1.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@csstools", "name": "css-calc", "version": "3.4.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "89ec76d1df021d5932be0e81ed4295eee1e723606aa3d83e1057d3f44d32f86bd3be167f0f038d27ef5a29bd5d96a9b46621ac2f94578e9d1f0a82589e47838c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40csstools/css-calc@3.4.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.4.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@csstools/css-calc@3.4.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.4.3.tgz" }, { "name": "ImportedModules", "value": "@csstools/css-calc,mathFunctionNames,@csstools/css-calc/mathFunctionNames,calcFromComponentValues,@csstools/css-calc/calcFromComponentValues" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 1 }, { "location": "src/transform-single-pair.ts", "line": 1 }, { "location": "src/transform-single-pair.ts", "line": 123 }, { "location": "src/transform-single-pair.ts", "line": 124 } ] } }, { "group": "@csstools", "name": "css-parser-algorithms", "version": "4.0.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "e347122b232f2beb6ae2acfa030ae5c9ed961ae38ab771703e0b4683a2937db1ce58dc3e464d6bcdb02d66767a20186c638f751cb4670d7c28c810228e69882c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40csstools/css-parser-algorithms@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@csstools/css-parser-algorithms@4.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.2.tgz" }, { "name": "ImportedModules", "value": "@csstools/css-parser-algorithms,isFunctionNode,@csstools/css-parser-algorithms/isFunctionNode,isTokenNode,@csstools/css-parser-algorithms/isTokenNode,gatherNodeAncestry,@csstools/css-parser-algorithms/gatherNodeAncestry,ComponentValue,@csstools/css-parser-algorithms/ComponentValue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 1 }, { "location": "src/transform-single-pair.ts", "line": 2 }, { "location": "src/transform-single-pair.ts", "line": 3 }, { "location": "src/transform-single-pair.ts", "line": 121 }, { "location": "src/transform-single-pair.ts", "line": 127 }, { "location": "src/transform-single-pair.ts", "line": 178 }, { "location": "src/transform.ts", "line": 1 }, { "location": "src/transform.ts", "line": 24 } ] }, "tags": [ "parse" ] }, { "group": "@csstools", "name": "css-tokenizer", "version": "4.0.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3a82a84747fbe9d098ebae8995c6e19954ecd9dad88f51945d94d84dc6d48098e1f4dbf8d5a15f676d5b3d04c4466e7e2f97010e8e3ae8d96d076969952e4607" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40csstools/css-tokenizer@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@csstools/css-tokenizer@4.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.2.tgz" }, { "name": "ImportedModules", "value": "@csstools/css-tokenizer,isTokenNumeric,@csstools/css-tokenizer/isTokenNumeric,TokenType,@csstools/css-tokenizer/TokenType,NumberType,@csstools/css-tokenizer/NumberType,isTokenNumber,@csstools/css-tokenizer/isTokenNumber,isTokenDimension,@csstools/css-tokenizer/isTokenDimension,stringify,@csstools/css-tokenizer/stringify,isTokenWhitespace,@csstools/css-tokenizer/isTokenWhitespace,CSSToken,@csstools/css-tokenizer/CSSToken" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 1 }, { "location": "src/index.ts", "line": 4 }, { "location": "src/index.ts", "line": 54 }, { "location": "src/transform-single-pair.ts", "line": 4 }, { "location": "src/transform-single-pair.ts", "line": 5 }, { "location": "src/transform-single-pair.ts", "line": 128 }, { "location": "src/transform-single-pair.ts", "line": 189 }, { "location": "src/transform-single-pair.ts", "line": 194 }, { "location": "src/transform-single-pair.ts", "line": 199 }, { "location": "src/transform-single-pair.ts", "line": 205 }, { "location": "src/transform-single-pair.ts", "line": 209 }, { "location": "src/transform-single-pair.ts", "line": 213 }, { "location": "src/transform-single-pair.ts", "line": 236 }, { "location": "src/transform.ts", "line": 2 }, { "location": "src/transform.ts", "line": 228 }, { "location": "src/transform.ts", "line": 232 }, { "location": "src/transform.ts", "line": 237 } ] } }, { "group": "@csstools", "name": "media-query-list-parser", "version": "5.0.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "ab1d7d3bc01b6cb2db0d201c23a60e6f2fd5abcad5e75a6c808be51793994ff2fc7d02430b24227cbea4fa4614e1af324a9cc9e1107366422ce77d1b027f32e1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40csstools/media-query-list-parser@5.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@csstools/media-query-list-parser/-/media-query-list-parser-5.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@csstools/media-query-list-parser@5.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@csstools/media-query-list-parser/-/media-query-list-parser-5.0.2.tgz" }, { "name": "ImportedModules", "value": "@csstools/media-query-list-parser,invertComparison,@csstools/media-query-list-parser/invertComparison,MediaFeatureEQ,@csstools/media-query-list-parser/MediaFeatureEQ,MediaFeatureLT,@csstools/media-query-list-parser/MediaFeatureLT,MediaFeatureGT,@csstools/media-query-list-parser/MediaFeatureGT,newMediaFeaturePlain,@csstools/media-query-list-parser/newMediaFeaturePlain,matchesRatioExactly,@csstools/media-query-list-parser/matchesRatioExactly,matchesRatio,@csstools/media-query-list-parser/matchesRatio,isMediaFeatureRange,@csstools/media-query-list-parser/isMediaFeatureRange,isMediaFeature,@csstools/media-query-list-parser/isMediaFeature,isMediaFeatureRangeNameValue,@csstools/media-query-list-parser/isMediaFeatureRangeNameValue,isMediaFeatureRangeValueName,@csstools/media-query-list-parser/isMediaFeatureRangeValueName,isMediaInParens,@csstools/media-query-list-parser/isMediaInParens,MediaInParens,@csstools/media-query-list-parser/MediaInParens,MediaAnd,@csstools/media-query-list-parser/MediaAnd,MediaConditionListWithAnd,@csstools/media-query-list-parser/MediaConditionListWithAnd,MediaCondition,@csstools/media-query-list-parser/MediaCondition,isMediaConditionListWithAnd,@csstools/media-query-list-parser/isMediaConditionListWithAnd,isMediaAnd,@csstools/media-query-list-parser/isMediaAnd,isMediaCondition,@csstools/media-query-list-parser/isMediaCondition,isMediaQuery,@csstools/media-query-list-parser/isMediaQuery,parseCustomMedia,@csstools/media-query-list-parser/parseCustomMedia,parse,@csstools/media-query-list-parser/parse,MediaFeature,@csstools/media-query-list-parser/MediaFeature,MediaFeatureComparison,@csstools/media-query-list-parser/MediaFeatureComparison,MediaFeatureValue,@csstools/media-query-list-parser/MediaFeatureValue,MediaQuery,@csstools/media-query-list-parser/MediaQuery" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 1 }, { "location": "src/index.ts", "line": 3 }, { "location": "src/index.ts", "line": 18 }, { "location": "src/index.ts", "line": 37 }, { "location": "src/transform-single-pair.ts", "line": 6 }, { "location": "src/transform-single-pair.ts", "line": 7 }, { "location": "src/transform-single-pair.ts", "line": 64 }, { "location": "src/transform-single-pair.ts", "line": 74 }, { "location": "src/transform-single-pair.ts", "line": 81 }, { "location": "src/transform-single-pair.ts", "line": 95 }, { "location": "src/transform-single-pair.ts", "line": 103 }, { "location": "src/transform-single-pair.ts", "line": 159 }, { "location": "src/transform-single-pair.ts", "line": 242 }, { "location": "src/transform.ts", "line": 3 }, { "location": "src/transform.ts", "line": 4 }, { "location": "src/transform.ts", "line": 33 }, { "location": "src/transform.ts", "line": 38 }, { "location": "src/transform.ts", "line": 47 }, { "location": "src/transform.ts", "line": 53 }, { "location": "src/transform.ts", "line": 62 }, { "location": "src/transform.ts", "line": 255 }, { "location": "src/transform.ts", "line": 259 }, { "location": "src/transform.ts", "line": 264 }, { "location": "src/transform.ts", "line": 276 }, { "location": "src/transform.ts", "line": 283 } ] }, "tags": [ "parse" ] }, { "group": "@csstools", "name": "postcss-tape", "version": "7.0.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "687420631dfa704d0b393a0e1c7ce2054e7f12b8658a19b405126c2fadd5b40037445a7fba3c725f057429d48ba92c9b0b1be53dca8dcd5f367c1c0bda6caa9f" } ], "licenses": [ { "license": { "id": "MIT-0", "url": "https://opensource.org/licenses/MIT-0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40csstools/postcss-tape@7.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@csstools/postcss-tape/-/postcss-tape-7.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@csstools/postcss-tape@7.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@csstools/postcss-tape/-/postcss-tape-7.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "puppeteer", "version": "25.14.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "facd48a9b97d0ec18b39a41d80243286d80766c17d862e08bbc8ae06ac73adac545e8446d50918408d02035fd5b0d2b58195897ece7404bfe839bd4bf98cfc62" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/puppeteer@25.14.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/puppeteer/-/puppeteer-25.14.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/puppeteer@25.14.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/puppeteer/-/puppeteer-25.14.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/plugins/postcss-media-minmax/node_modules/.bin/puppeteer" }, { "name": "cdx:npm:bin", "value": "puppeteer" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@puppeteer", "name": "browsers", "version": "3.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5280a8dcfca76e6dfb68b104a32752886faddb8ba2eec2c3e34fb4ec22b1cf1372e0fa52a3024c92f94b22257aed78cfd65315ca7850567bb0953001a811fc2d" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40puppeteer/browsers@3.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@puppeteer/browsers/-/browsers-3.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@puppeteer/browsers@3.2.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@puppeteer/browsers/-/browsers-3.2.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/plugins/postcss-media-minmax/node_modules/.bin/browsers" }, { "name": "cdx:npm:bin", "value": "browsers" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "modern-tar", "version": "0.8.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2d84a4b34b4d56a6ed7b3ffd381d1814feaa2d14aa91d031256390a55691ebb94d4db8f6ccd2f2629a309113226b99572c264acf1c28c64c47d8c6db051d9a12" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/modern-tar@0.8.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/modern-tar/-/modern-tar-0.8.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/modern-tar@0.8.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/modern-tar/-/modern-tar-0.8.6.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yargs", "version": "18.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f4ea4a38b79aa0d15e704a7b3fa8986f3cdeff90aa5a81fb37748cb3feb2d571789ccbc532ca44199cc9eae162f4c990c17872cea62848428ededbc0dd9fe8db" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@18.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yargs/-/yargs-18.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yargs@18.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs/-/yargs-18.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cliui", "version": "9.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93b9dd80a870a10bde04bfbfd6da86258373d3dec8ed63afc1b9a6536011e7e99a82d6e33d64134b50b9bf31a4042f189bc5164737ca533514a852f2a58e10fb" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@9.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cliui/-/cliui-9.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cliui@9.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cliui/-/cliui-9.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string-width", "version": "7.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b6c693224296f5be0df80123f92540f96849cd5effccc85c4aeefc98b2964a4edc5cc3921ec04a15652cd1f5b0abc4322b73202414115fa19b8b89186ddbc691" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@7.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string-width/-/string-width-7.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string-width@7.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string-width/-/string-width-7.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "emoji-regex", "version": "10.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b68508f38612e589b15b6d7d7ab9e2583d022153a8e3ac46282a2578d41180ecc3a2b8018b5bf80fbd7f385ce00fd18ed9418a22fd42dd2a7c0c09f4fa3e70ec" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@10.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-10.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@10.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-10.6.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "get-east-asian-width", "version": "1.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5e31f50040b17f48222f6575694f2f2b2451da9a5151be5cd04bd3ef3b894e8910ef86cda39db33ad821a9d588aab8540fbf5fa37c7459f29974eab117a2c6d5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-east-asian-width@1.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/get-east-asian-width/-/get-east-asian-width-1.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/get-east-asian-width@1.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/get-east-asian-width/-/get-east-asian-width-1.7.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-ansi", "version": "7.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c833cc363a785b27d80641e78c844b7dc6b58ba28cc860adb1582829eff3d7eeafba481a10d76018166df9998a3dce206afbc46793a01df1ddadace180dc86ef" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-regex", "version": "6.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2b34d5936b425801ed62bbefbda3fc6c9289ab6a558a784b70611076d2c860f6e634637261ef10c0d693518429d89effbc8b142ade500aa01f5246321bd0e43b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@6.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.4.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrap-ansi", "version": "9.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e3602d9a0aa357e5f556974e7f24c6398462d3fceca0baad5d07244e6a937b26d3f810c86ccfc6bb1a3bc77a44dafb69af5a24eb146a33d3a905ef89ca8ab2c3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@9.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-9.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrap-ansi@9.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-9.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-styles", "version": "6.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e038fa336f0907ea001fc9059132d4a3e6b68f038592ea9bdf2b9c53408035c45151bc52d1c3f49d96021a371cdc1357c1122c5159831a0cdac267bbcef247be" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escalade", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5948f6aa5c5a42d3b883a3eae5cdbd193716183c9df22b4bf334e58a98040b3dc97ac02288e2a8b5df0953aa2d0773c00a01bac64254c9585ba0c4be6e37bf8c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string-width", "version": "8.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "65b9993342428a140df757569f1a22a53d8a384c87a84c9f4575328ee4615bc6ffc67a8f0e8ab88161150294d56bd75bdb037c9a6a229201416e387bd7e70679" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@8.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string-width/-/string-width-8.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string-width@8.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string-width/-/string-width-8.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "y18n", "version": "5.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d297c5cde81e0d62472480264cb44fd83c078dd179b3b8e8f6dbb3b5d43102120d09dbd2fb79c620da8f774d00a61a8947fd0b8403544baffeed209bf7c60e7c" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yargs-parser", "version": "22.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "af0bbf0a535d48ca644ab51bf9de8146c4a42d4ab57e67ec63a4cea58cd3c2fc24835fcd446f39281cb792afbe03c2ca4305fa96cbbe69669dfb6921bee5ebab" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@22.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-22.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@22.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-22.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "chromium-bidi", "version": "157.0.8090-0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "289c3b21082a5f0c692602651083e0e66af6668a80fa391346d739100048eec509ddbbb772923b36e101a23e069f502c17bf02693f52a395905aca4adffc186a" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chromium-bidi@157.0.8090-0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chromium-bidi/-/chromium-bidi-157.0.8090-0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chromium-bidi@157.0.8090-0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chromium-bidi/-/chromium-bidi-157.0.8090-0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "devtools-protocol", "version": "0.0.1696802", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14ee7f48435fbdcd8af304675907e529cc2ea131f87419170964d0f5e6c85adb97f09339f99bc2a2d6849a47e1db5a4eed3bc82864ccde11b8c458aaf564f09a" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/devtools-protocol@0.0.1696802", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1696802.tgz" } ], "type": "library", "bom-ref": "pkg:npm/devtools-protocol@0.0.1696802", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1696802.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mitt", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bca8af0137ebf7b976fd00426009176036eb2163ccd8820a125ed83e18c2bca946de4136826fae068ea71172b7339fc57e1fc52e9284c73390dc926824614a07" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mitt@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mitt/-/mitt-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mitt@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mitt/-/mitt-3.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "zod", "version": "4.6.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83c5b60f6914e9af2e9ed734e777d7d6e5412b333bcaa0315bfdf3c24f37fba472176f9228eb95f9cd30043854c335753da19aa66647fab99c5333dffb7086c2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zod@4.6.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/zod@4.6.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lilconfig", "version": "3.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cc967206642102b0d179fb964f2a59c700e91432189ab8fcca9481bf0183e4fd7763de6ce838f32a0bb80d57466de41ae4f0c4b0038200f364e17f90391d34eb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lilconfig@3.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lilconfig@3.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "puppeteer-core", "version": "25.14.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2d08ad9deb37b417956dd67b57fe22c093cb64682497db8154ad16ed860c87af23ff763d78dbaf8f8ca5f85768ef33744ae6a338cae177b68f8f70e27caf24e8" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/puppeteer-core@25.14.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/puppeteer-core/-/puppeteer-core-25.14.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/puppeteer-core@25.14.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/puppeteer-core/-/puppeteer-core-25.14.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typed-query-selector", "version": "2.12.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fddb6e319caeb472e5af15a1842d6e89bd3410b52bd9d67c0bd07c633658b0999e137579e8ec516e5ad233651a175e36a5c32d6a4ede859ebea6858679e84d22" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-query-selector@2.12.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typed-query-selector/-/typed-query-selector-2.12.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typed-query-selector@2.12.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typed-query-selector/-/typed-query-selector-2.12.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "webdriver-bidi-protocol", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5975acfda5c5d9ae80975676fd5ffb1a9da83d93800261e324e4e6bf82825d1275db620c8f7b5248c73a6b8ab72b840e9a141bb1efc086bfa84d524e5367548b" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/webdriver-bidi-protocol@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/webdriver-bidi-protocol/-/webdriver-bidi-protocol-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/webdriver-bidi-protocol@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/webdriver-bidi-protocol/-/webdriver-bidi-protocol-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "driver" ] }, { "group": "", "name": "ws", "version": "8.22.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "61d82073df3bf913b40275ad67fed6abd16d36f72b2f56ff44ed2e77d9968d43e00ebb00030412179d6c9b6866d57a1f6d4ff88e4a4612c2c5b1967153ed433a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@8.22.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.22.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/nanoid@3.3.20", "dependsOn": [] }, { "ref": "pkg:npm/picocolors@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/source-map-js@1.2.2", "dependsOn": [] }, { "ref": "pkg:npm/postcss@8.5.30", "dependsOn": [ "pkg:npm/nanoid@3.3.20", "pkg:npm/picocolors@1.1.1", "pkg:npm/source-map-js@1.2.2" ] }, { "ref": "pkg:npm/@csstools/css-tokenizer@4.0.2", "dependsOn": [] }, { "ref": "pkg:npm/@csstools/css-parser-algorithms@4.0.2", "dependsOn": [ "pkg:npm/@csstools/css-tokenizer@4.0.2" ] }, { "ref": "pkg:npm/@csstools/css-calc@3.4.3", "dependsOn": [ "pkg:npm/@csstools/css-parser-algorithms@4.0.2", "pkg:npm/@csstools/css-tokenizer@4.0.2" ] }, { "ref": "pkg:npm/@csstools/media-query-list-parser@5.0.2", "dependsOn": [ "pkg:npm/@csstools/css-parser-algorithms@4.0.2", "pkg:npm/@csstools/css-tokenizer@4.0.2" ] }, { "ref": "pkg:npm/@csstools/postcss-tape@7.0.2", "dependsOn": [ "pkg:npm/postcss@8.5.30" ] }, { "ref": "pkg:npm/modern-tar@0.8.6", "dependsOn": [] }, { "ref": "pkg:npm/emoji-regex@10.6.0", "dependsOn": [] }, { "ref": "pkg:npm/get-east-asian-width@1.7.0", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@6.4.0", "dependsOn": [] }, { "ref": "pkg:npm/strip-ansi@7.2.0", "dependsOn": [ "pkg:npm/ansi-regex@6.4.0" ] }, { "ref": "pkg:npm/string-width@7.2.0", "dependsOn": [ "pkg:npm/emoji-regex@10.6.0", "pkg:npm/get-east-asian-width@1.7.0", "pkg:npm/strip-ansi@7.2.0" ] }, { "ref": "pkg:npm/ansi-styles@6.2.3", "dependsOn": [] }, { "ref": "pkg:npm/wrap-ansi@9.0.2", "dependsOn": [ "pkg:npm/ansi-styles@6.2.3", "pkg:npm/string-width@7.2.0", "pkg:npm/strip-ansi@7.2.0" ] }, { "ref": "pkg:npm/cliui@9.0.1", "dependsOn": [ "pkg:npm/string-width@7.2.0", "pkg:npm/strip-ansi@7.2.0", "pkg:npm/wrap-ansi@9.0.2" ] }, { "ref": "pkg:npm/escalade@3.2.0", "dependsOn": [] }, { "ref": "pkg:npm/get-caller-file@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/string-width@8.3.0", "dependsOn": [ "pkg:npm/get-east-asian-width@1.7.0", "pkg:npm/strip-ansi@7.2.0" ] }, { "ref": "pkg:npm/y18n@5.0.8", "dependsOn": [] }, { "ref": "pkg:npm/yargs-parser@22.0.0", "dependsOn": [] }, { "ref": "pkg:npm/yargs@18.2.0", "dependsOn": [ "pkg:npm/cliui@9.0.1", "pkg:npm/escalade@3.2.0", "pkg:npm/get-caller-file@2.0.5", "pkg:npm/string-width@8.3.0", "pkg:npm/y18n@5.0.8", "pkg:npm/yargs-parser@22.0.0" ] }, { "ref": "pkg:npm/@puppeteer/browsers@3.2.5", "dependsOn": [ "pkg:npm/modern-tar@0.8.6", "pkg:npm/yargs@18.2.0" ] }, { "ref": "pkg:npm/devtools-protocol@0.0.1696802", "dependsOn": [] }, { "ref": "pkg:npm/mitt@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/zod@4.6.7", "dependsOn": [] }, { "ref": "pkg:npm/chromium-bidi@157.0.8090-0", "dependsOn": [ "pkg:npm/devtools-protocol@0.0.1696802", "pkg:npm/mitt@3.0.1", "pkg:npm/zod@4.6.7" ] }, { "ref": "pkg:npm/lilconfig@3.1.4", "dependsOn": [] }, { "ref": "pkg:npm/typed-query-selector@2.12.3", "dependsOn": [] }, { "ref": "pkg:npm/webdriver-bidi-protocol@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/ws@8.22.0", "dependsOn": [] }, { "ref": "pkg:npm/puppeteer-core@25.14.0", "dependsOn": [ "pkg:npm/@puppeteer/browsers@3.2.5", "pkg:npm/chromium-bidi@157.0.8090-0", "pkg:npm/devtools-protocol@0.0.1696802", "pkg:npm/typed-query-selector@2.12.3", "pkg:npm/webdriver-bidi-protocol@1.0.1", "pkg:npm/ws@8.22.0" ] }, { "ref": "pkg:npm/puppeteer@25.14.0", "dependsOn": [ "pkg:npm/@puppeteer/browsers@3.2.5", "pkg:npm/chromium-bidi@157.0.8090-0", "pkg:npm/devtools-protocol@0.0.1696802", "pkg:npm/lilconfig@3.1.4", "pkg:npm/puppeteer-core@25.14.0", "pkg:npm/typed-query-selector@2.12.3" ] }, { "ref": "pkg:npm/@csstools/postcss-media-minmax@3.0.8", "dependsOn": [ "pkg:npm/@csstools/css-calc@3.4.3", "pkg:npm/@csstools/css-parser-algorithms@4.0.2", "pkg:npm/@csstools/css-tokenizer@4.0.2", "pkg:npm/@csstools/media-query-list-parser@5.0.2", "pkg:npm/@csstools/postcss-tape@7.0.2", "pkg:npm/postcss@8.5.30", "pkg:npm/puppeteer@25.14.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@csstools/postcss-media-minmax@3.0.8" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-18T17:34:07Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'postcss-media-minmax' with version '3.0.8'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }