{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:c4e2d8b2-c99f-4cb8-81cb-98c068cf5bdd", "version": 1, "metadata": { "timestamp": "2026-10-18T16:00:46Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "dependency-cruiser", "group": "", "version": "18.3.1", "description": "Validate and visualize dependencies. With your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.", "purl": "pkg:npm/dependency-cruiser@18.3.1", "bom-ref": "pkg:npm/dependency-cruiser@18.3.1", "author": "Sander Verweij (https://sverweij.github.io)", "properties": [ { "name": "cdx:npm:bin", "value": "dependency-cruiser, dependency-cruise, depcruise, depcruise-baseline, depcruise-fmt, depcruise-wrap-stream-in-html" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/sverweij/dependency-cruiser" }, { "type": "vcs", "url": "git+https://github.com/sverweij/dependency-cruiser.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "acorn", "version": "8.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "946abef72af5fc6b8059a558207463befc921b9ff855f288bc2f045b14ad3dd70387f29aec51b7b703fabf8779064adabd48a584802c1b8423f37b74d8b5943d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@8.18.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.18.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/acorn" }, { "name": "cdx:npm:bin", "value": "acorn" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "acorn,Parser,acorn/Parser,parse,acorn/parse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/extract/acorn/parse.mjs", "line": 2 }, { "location": "src/extract/acorn/parse.mjs", "line": 19 }, { "location": "src/extract/acorn/parse.mjs", "line": 48 }, { "location": "src/extract/transpile/javascript-wrap.mjs", "line": 8 } ] } }, { "group": "", "name": "acorn-jsx", "version": "5.3.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "aeaf6cf893617f4202863b435f196527b838d68664e52957b69d0b1f0c80e5c7a3c27eef2a62a9e293eb8ba60478fbf63d4eb9b00b1e81b5ed2229e60c50d781" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-jsx@5.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn-jsx@5.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz" }, { "name": "ImportedModules", "value": "acorn-jsx" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/extract/acorn/parse.mjs", "line": 4 }, { "location": "src/extract/acorn/parse.mjs", "line": 19 } ] } }, { "group": "", "name": "acorn-jsx-walk", "version": "2.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "baea3a8898f80f8ca091dcddea33ed731b3cbd98035fd605224a9ccc6226a32a57d9f4387552269aedd4cc0e329e2c4220c4eb10e596fbde4cd87b8168210e54" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-jsx-walk@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn-jsx-walk/-/acorn-jsx-walk-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn-jsx-walk@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn-jsx-walk/-/acorn-jsx-walk-2.0.0.tgz" }, { "name": "ImportedModules", "value": "acorn-jsx-walk,extend,acorn-jsx-walk/extend" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/extract/acorn/extract-es6-deps.mjs", "line": 2 }, { "location": "src/extract/acorn/extract-es6-deps.mjs", "line": 8 } ] } }, { "group": "", "name": "acorn-loose", "version": "8.5.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3cfbd5ea0f1418c1a08eb32efa7fdff44fed09290d43663dede16fb957497c6d75fb174878370bc8d742f121dcac76d1aa47f02c049da65c91e81eac28cd54e0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-loose@8.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn-loose/-/acorn-loose-8.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn-loose@8.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn-loose/-/acorn-loose-8.5.2.tgz" }, { "name": "ImportedModules", "value": "acorn-loose,parse,acorn-loose/parse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/extract/acorn/parse.mjs", "line": 3 }, { "location": "src/extract/acorn/parse.mjs", "line": 50 } ] } }, { "group": "", "name": "acorn-walk", "version": "8.3.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "1c41cd7db6abb3dbf8a60a56e923b52923e47e84b4c5538cffd53390996d8e5b0766625ab3183c69792e65aed231ff2f28620186952c3e5b904aa849142a9e6f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-walk@8.3.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@8.3.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.5.tgz" }, { "name": "ImportedModules", "value": "acorn-walk,simple,acorn-walk/simple,base,acorn-walk/base" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/extract/acorn/extract-amd-deps.mjs", "line": 1 }, { "location": "src/extract/acorn/extract-amd-deps.mjs", "line": 58 }, { "location": "src/extract/acorn/extract-cjs-deps.mjs", "line": 1 }, { "location": "src/extract/acorn/extract-cjs-deps.mjs", "line": 97 }, { "location": "src/extract/acorn/extract-es6-deps.mjs", "line": 1 }, { "location": "src/extract/acorn/extract-es6-deps.mjs", "line": 56 } ] } }, { "group": "", "name": "commander", "version": "15.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "cfaeeee1987308bfd3c9dbb5949011b4465859b59a37ba182c76ecbb3a1cafacb837a59901a806dd1438156eb5575ff4fa3226a63dbddd77eb7189ddd6ac6d3e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@15.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@15.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz" }, { "name": "ImportedModules", "value": "commander,program,commander/program,Option,commander/Option" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bin/dependency-cruiser.mjs", "line": 3 }, { "location": "bin/dependency-cruiser.mjs", "line": 11 }, { "location": "bin/dependency-cruiser.mjs", "line": 185 }, { "location": "bin/dependency-cruiser.mjs", "line": 186 }, { "location": "bin/dependency-cruiser.mjs", "line": 188 } ] } }, { "group": "", "name": "enhanced-resolve", "version": "5.25.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "9c65edb39ce72739963eefa6204f62cc23b3760eb7a0971ada60f3196593b61eecaf86824e829ca32155050c0def9223e4f7faa79d74130913a958934730d5fb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/enhanced-resolve@5.25.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.25.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/enhanced-resolve@5.25.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.25.1.tgz" }, { "name": "ImportedModules", "value": "enhanced-resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/extract/resolve/resolve.mjs", "line": 1 }, { "location": "src/main/resolve-options/normalize.mjs", "line": 2 } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "45b279fe398570d342703579a3d7939c12c9fc7b33595d0fef76dcf857f89d2feb263f98692e881b288e2f45680585fe9755ab97793ade1fcaac7fa7849d17bd" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tapable", "version": "2.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bb173fce9a8583ac7b0bcbce13b961e8b6dd6bc7842fdce6566fcf2de4cf051861d710a0756690f89d42522786a487e6d8776db14a51bfe1ec8626ac04c71ce8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tapable@2.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tapable/-/tapable-2.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tapable@2.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tapable/-/tapable-2.3.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ignore", "version": "7.0.9", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6eb4d3b2f151b790b58061ed3ecb7fdbcd548cf0f9b7d7c1a9b82830f9555b2d7564b4cf7eeec7c4ae1962a3bd1fba3fc82f6b493088f3911a4383a8635daa63" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@7.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ignore/-/ignore-7.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ignore@7.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ignore/-/ignore-7.0.9.tgz" }, { "name": "ImportedModules", "value": "ignore" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/utl/find-all-files.mjs", "line": 3 }, { "location": "src/utl/find-all-files.mjs", "line": 62 } ] } }, { "group": "", "name": "interpret", "version": "3.1.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "eb1c187c76da8e9a05d312d6fa2c0b921c20bcba190df8d87e814dbbc7ed3285c8373c2eca634b77dbbf2a6c2d753d866d1fbf0b3ebaa2d1061155541d7f502d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/interpret@3.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/interpret/-/interpret-3.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/interpret@3.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/interpret/-/interpret-3.1.1.tgz" }, { "name": "ImportedModules", "value": "interpret" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/config-utl/extract-webpack-resolve-config.mjs", "line": 50 } ] } }, { "group": "", "name": "is-installed-globally", "version": "1.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "2b9e53db695fa50eb7378284379ee365401a018a981c47bcbde6ff4f2709464f4375208b2dca2f5f3fe62fa98e9e141a66c406c0f86e168a5d40896a19212389" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-installed-globally@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-installed-globally@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-1.0.0.tgz" }, { "name": "ImportedModules", "value": "is-installed-globally" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/cli/index.mjs", "line": 4 } ] } }, { "group": "", "name": "global-directory", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c074d47035286751f9ff4895a84b9d616e3f90094de5c6778ff6d79f40e96e2ce5f6269455e5921ea88e8ec824e8e5b66e42dc95b063cdec01cfac1e435cc0d9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/global-directory@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/global-directory/-/global-directory-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/global-directory@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/global-directory/-/global-directory-4.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ini", "version": "4.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4109e7c4dc9fbe61c522c8fb8243dc632991f09770fe8ee6a796458a1c67ea1f028ba7e1dc3c7813580f8e9404a48b8fa3d5d5358fd953087804f3231b22f4d6" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@4.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ini/-/ini-4.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ini@4.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ini/-/ini-4.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-path-inside", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "949255ff97584be45c2fcb907410d6f5cf6e5852cb04d4721619c0297c39b55a8b94a67844c1992aff9843f200dce843f91a5b25ad4b2c53351503c6c885ef38" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-path-inside@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-path-inside@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-4.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json5", "version": "2.2.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "5e63967bb7b21d81f5e1c2dd54fa3283e18e1f7ad85fef8aa73af2949c125bdf2ddcd93e53c5ce97c15628e830b7375bf255c67facd8c035337873167f16acca" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json5@2.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json5@2.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/json5" }, { "name": "cdx:npm:bin", "value": "json5" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "json5" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/config-utl/extract-babel-config.mjs", "line": 40 }, { "location": "src/config-utl/extract-depcruise-config/read-config.mjs", "line": 20 }, { "location": "src/config-utl/extract-known-violations.mjs", "line": 55 } ] } }, { "group": "", "name": "picomatch", "version": "4.0.7", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a9c26ef3c436216a89b030f9dbd24a31dc069bf76f2275b81ef427470887f49b62849bf318eb1c0ed1c4df1d6904a794393cac43c91598b9c9da426eef285c18" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz" }, { "name": "ImportedModules", "value": "picomatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/cli/index.mjs", "line": 3 }, { "location": "src/cli/index.mjs", "line": 106 }, { "location": "src/extract/gather-initial-sources.mjs", "line": 5 }, { "location": "src/extract/gather-initial-sources.mjs", "line": 76 }, { "location": "src/extract/gather-initial-sources.mjs", "line": 113 }, { "location": "src/extract/resolve/module-classifiers.mjs", "line": 4 }, { "location": "src/extract/resolve/module-classifiers.mjs", "line": 184 }, { "location": "src/extract/resolve/module-classifiers.mjs", "line": 202 } ] } }, { "group": "", "name": "prompts", "version": "2.4.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "37136ffe42e0b8203ba778c4f282f668406cac95a001a901a609a02ba9693d657e5ae3a663aaf6ff36c05673fe4fc6d0940d27cc75d2252256d07abbca5683d9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prompts@2.4.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/prompts@2.4.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz" }, { "name": "ImportedModules", "value": "prompts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/cli/init-config/get-user-input.mjs", "line": 2 }, { "location": "src/cli/init-config/get-user-input.mjs", "line": 169 } ] } }, { "group": "", "name": "kleur", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "793233955392511f89c5d0c57a911870132d67d42a75e7feae7cd675166e31b3b2c2ee6d3b6c3637baea8e800d67993dbf2c212fa06bd55463508813431e04f3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kleur@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/kleur@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sisteransi", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6cb186951d50c417329e7d9de589835f83068e566fcb631104344d1cb27c548ea5ebef45522c9314d27422f78e48fd1b7178150cf45c7c6a80d298daa94a5f56" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sisteransi@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sisteransi@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rechoir", "version": "0.8.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "fefc6909775d897f0d19f18efe64da7f08eae1a15affbd69bda9a2a74fbe210937cc6f1c6c28f47e27cd3eb8e31755cc5d49def758cbf4ea3199dca4a04b627d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rechoir@0.8.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.8.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rechoir@0.8.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.8.0.tgz" }, { "name": "ImportedModules", "value": "rechoir" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/config-utl/extract-webpack-resolve-config.mjs", "line": 51 } ] } }, { "group": "", "name": "resolve", "version": "1.22.12", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4f2789d7389fe7704f7c7a28b411b03d1613d5152dea8196b1a42bf14c995bf7809bd6caa228edbebb920c49991e6f760b04bd9e3eff7d6b6da8f0a0cdea7c08" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.12", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.12.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.12", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.12.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/resolve" }, { "name": "cdx:npm:bin", "value": "resolve" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "es-errors", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-core-module", "version": "2.16.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7af3abf317d72b113aa924748525cbdabdec77b00b8fcfbb8d0114bcf61c9b9b20645749f806334fac8d9897a7bc8610060206c1fc33d3cb0bf33a0bef2ab604" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-core-module@2.16.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-core-module@2.16.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "hasown", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4f651b7db044177db089ea5722c3254d6f7e743602eb0321fedfef600e2db8e30aa96cff9f7bebd4d152c508b23fece4da65eca0c03f8bfeea57a2cabadd6dd4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "function-bind", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-parse", "version": "1.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a2dd169d74bd7e076480871e3dee911cd935580f3e9ae3dae9c4a3791dd5f0adbbabd041d6b4c4dd1d69ec7bf4cf567201cf2ce95beff0323259febcd4c02dd3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "safe-regex", "version": "2.1.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "af1fb1f0033329be50e6543de59a22e996c9ab008b92a8b75ee257a793f7ad3f0e11ceac642246e40139754de5b2046bfc5e01b37d634a554dfa3e4aaec1aef4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-regex@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/safe-regex/-/safe-regex-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safe-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/safe-regex/-/safe-regex-2.1.1.tgz" }, { "name": "ImportedModules", "value": "safe-regex" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/main/options/assert-validity.mjs", "line": 2 }, { "location": "src/main/options/assert-validity.mjs", "line": 50 }, { "location": "src/main/rule-set/assert-validity.mjs", "line": 1 }, { "location": "src/main/rule-set/assert-validity.mjs", "line": 33 } ] } }, { "group": "", "name": "regexp-tree", "version": "0.1.27", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8844f1a632ba628456246e68ea15cbc2f8d80285be144667f68b343c3fdbe803fac50c2c6bf63b942560222c416d43cc7e1bbe8b62ed75e02a5538069506ab7c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexp-tree@0.1.27", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/regexp-tree/-/regexp-tree-0.1.27.tgz" } ], "type": "library", "bom-ref": "pkg:npm/regexp-tree@0.1.27", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/regexp-tree/-/regexp-tree-0.1.27.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/regexp-tree" }, { "name": "cdx:npm:bin", "value": "regexp-tree" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "semver", "version": "7.8.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "63bfca0ec6fc2e3a28669c1aa86cae94ee8342592c8029dc7211c693eb19218e1206f52870c044147e54af57c8e1d57e26f974c3a723bee71a222e34a6e462a0" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/semver" }, { "name": "cdx:npm:bin", "value": "semver" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "semver/functions/satisfies,semver/functions/coerce,semver/functions/satisfies.js,semver,coerce,semver/coerce,satisfies,semver/satisfies" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/utl/try-require.cjs", "line": 2 }, { "location": "src/utl/try-require.cjs", "line": 3 }, { "location": "src/cli/assert-node-environment-suitable.mjs", "line": 1 }, { "location": "src/extract/transpile/try-import-available.mjs", "line": 3 }, { "location": "src/extract/transpile/try-import-available.mjs", "line": 29 }, { "location": "src/extract/transpile/try-import-available.mjs", "line": 33 }, { "location": "src/utl/try-import.mjs", "line": 3 }, { "location": "src/utl/try-import.mjs", "line": 52 }, { "location": "src/utl/try-import.mjs", "line": 56 }, { "location": "src/cli/assert-node-environment-suitable.mjs", "line": 15 } ] } }, { "group": "", "name": "tsconfig-paths-webpack-plugin", "version": "4.2.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "cdb7a6deb7d14bc06078d2b9d19cf94884205f32da7e21e33b0500be4ff7f3fa358c79ff57940081551ccfcf38a2bed661c3da1f73760887d4736bb4ba5ed470" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsconfig-paths-webpack-plugin@4.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tsconfig-paths-webpack-plugin/-/tsconfig-paths-webpack-plugin-4.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tsconfig-paths-webpack-plugin@4.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tsconfig-paths-webpack-plugin/-/tsconfig-paths-webpack-plugin-4.2.0.tgz" }, { "name": "ImportedModules", "value": "tsconfig-paths-webpack-plugin" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/main/resolve-options/normalize.mjs", "line": 83 } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-styles", "version": "4.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-convert", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-name", "version": "1.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "7.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tsconfig-paths", "version": "4.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "368678ae888decb9db2a7f50a84d5a99cf4325fcef657c45e310dabdc396b7504f91dc7e9bed2026e3ccf92d2f09eef34c931850fd11f293b65ccafe63ca0b22" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsconfig-paths@4.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-4.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tsconfig-paths@4.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-4.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "1.2.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-bom", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bdabc03115ce80154d17a9f210498bdc304ad7d891a437282305beb3043e09b1a2bbb963bbab7e264940d4c1f07a85ad69d82de0849552c5cbc83ab7e1d75cc0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-bom@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "watskeburt", "version": "6.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "8df8ae0c005ac52902ef54faa19def092f7dae86244879bff80b3e1b40f3f2d6801d06fe48906f2c49b9465b201bbd5775f023debbfb7ae75405383071050f95" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/watskeburt@6.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/watskeburt/-/watskeburt-6.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/watskeburt@6.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/watskeburt/-/watskeburt-6.0.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/watskeburt" }, { "name": "cdx:npm:bin", "value": "watskeburt" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "watskeburt,getSHA,watskeburt/getSHA,list,watskeburt/list" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/cache/metadata-strategy.mjs", "line": 4 }, { "location": "src/cli/normalize-cli-options.mjs", "line": 290 } ] } } ], "dependencies": [ { "ref": "pkg:npm/acorn@8.18.0", "dependsOn": [] }, { "ref": "pkg:npm/acorn-jsx@5.3.2", "dependsOn": [ "pkg:npm/acorn@8.18.0" ] }, { "ref": "pkg:npm/acorn-jsx-walk@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/acorn-loose@8.5.2", "dependsOn": [ "pkg:npm/acorn@8.18.0" ] }, { "ref": "pkg:npm/acorn-walk@8.3.5", "dependsOn": [ "pkg:npm/acorn@8.18.0" ] }, { "ref": "pkg:npm/commander@15.0.0", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@4.2.11", "dependsOn": [] }, { "ref": "pkg:npm/tapable@2.3.3", "dependsOn": [] }, { "ref": "pkg:npm/enhanced-resolve@5.25.1", "dependsOn": [ "pkg:npm/graceful-fs@4.2.11", "pkg:npm/tapable@2.3.3" ] }, { "ref": "pkg:npm/ignore@7.0.9", "dependsOn": [] }, { "ref": "pkg:npm/interpret@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/ini@4.1.1", "dependsOn": [] }, { "ref": "pkg:npm/global-directory@4.0.1", "dependsOn": [ "pkg:npm/ini@4.1.1" ] }, { "ref": "pkg:npm/is-path-inside@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-installed-globally@1.0.0", "dependsOn": [ "pkg:npm/global-directory@4.0.1", "pkg:npm/is-path-inside@4.0.0" ] }, { "ref": "pkg:npm/json5@2.2.3", "dependsOn": [] }, { "ref": "pkg:npm/picomatch@4.0.7", "dependsOn": [] }, { "ref": "pkg:npm/kleur@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/sisteransi@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/prompts@2.4.2", "dependsOn": [ "pkg:npm/kleur@3.0.3", "pkg:npm/sisteransi@1.0.5" ] }, { "ref": "pkg:npm/es-errors@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/function-bind@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/hasown@2.0.4", "dependsOn": [ "pkg:npm/function-bind@1.1.2" ] }, { "ref": "pkg:npm/is-core-module@2.16.2", "dependsOn": [ "pkg:npm/hasown@2.0.4" ] }, { "ref": "pkg:npm/path-parse@1.0.7", "dependsOn": [] }, { "ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/resolve@1.22.12", "dependsOn": [ "pkg:npm/es-errors@1.3.0", "pkg:npm/is-core-module@2.16.2", "pkg:npm/path-parse@1.0.7", "pkg:npm/supports-preserve-symlinks-flag@1.0.0" ] }, { "ref": "pkg:npm/rechoir@0.8.0", "dependsOn": [ "pkg:npm/resolve@1.22.12" ] }, { "ref": "pkg:npm/regexp-tree@0.1.27", "dependsOn": [] }, { "ref": "pkg:npm/safe-regex@2.1.1", "dependsOn": [ "pkg:npm/regexp-tree@0.1.27" ] }, { "ref": "pkg:npm/semver@7.8.5", "dependsOn": [] }, { "ref": "pkg:npm/color-name@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/color-convert@2.0.1", "dependsOn": [ "pkg:npm/color-name@1.1.4" ] }, { "ref": "pkg:npm/ansi-styles@4.3.0", "dependsOn": [ "pkg:npm/color-convert@2.0.1" ] }, { "ref": "pkg:npm/has-flag@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@7.2.0", "dependsOn": [ "pkg:npm/has-flag@4.0.0" ] }, { "ref": "pkg:npm/chalk@4.1.2", "dependsOn": [ "pkg:npm/ansi-styles@4.3.0", "pkg:npm/supports-color@7.2.0" ] }, { "ref": "pkg:npm/minimist@1.2.8", "dependsOn": [] }, { "ref": "pkg:npm/strip-bom@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/tsconfig-paths@4.2.0", "dependsOn": [ "pkg:npm/json5@2.2.3", "pkg:npm/minimist@1.2.8", "pkg:npm/strip-bom@3.0.0" ] }, { "ref": "pkg:npm/tsconfig-paths-webpack-plugin@4.2.0", "dependsOn": [ "pkg:npm/chalk@4.1.2", "pkg:npm/enhanced-resolve@5.25.1", "pkg:npm/tapable@2.3.3", "pkg:npm/tsconfig-paths@4.2.0" ] }, { "ref": "pkg:npm/watskeburt@6.0.0", "dependsOn": [] }, { "ref": "pkg:npm/dependency-cruiser@18.3.1", "dependsOn": [ "pkg:npm/acorn-jsx-walk@2.0.0", "pkg:npm/acorn-jsx@5.3.2", "pkg:npm/acorn-loose@8.5.2", "pkg:npm/acorn-walk@8.3.5", "pkg:npm/acorn@8.18.0", "pkg:npm/commander@15.0.0", "pkg:npm/enhanced-resolve@5.25.1", "pkg:npm/ignore@7.0.9", "pkg:npm/interpret@3.1.1", "pkg:npm/is-installed-globally@1.0.0", "pkg:npm/json5@2.2.3", "pkg:npm/picomatch@4.0.7", "pkg:npm/prompts@2.4.2", "pkg:npm/rechoir@0.8.0", "pkg:npm/safe-regex@2.1.1", "pkg:npm/semver@7.8.5", "pkg:npm/tsconfig-paths-webpack-plugin@4.2.0", "pkg:npm/watskeburt@6.0.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/dependency-cruiser@18.3.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-18T16:00:46Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'dependency-cruiser' with version '18.3.1'." } ] }