{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:158831df-6bfa-400b-bb20-a907582c8ff9", "version": 1, "metadata": { "timestamp": "2026-10-14T06:38:03Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "devframe", "group": "", "version": "1.2.5", "description": "Framework for building one portable devtool integration that runs in any viewer.", "purl": "pkg:npm/devframe@1.2.5", "bom-ref": "pkg:npm/devframe@1.2.5", "author": "Anthony Fu ", "properties": [ { "name": "cdx:npm:bin", "value": "devframe" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, watch, typecheck, prepack" }, { "name": "cdx:npm:buildScripts", "value": "build, watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@devframes\\n@standard-schema" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@devframes/agentic/package.json\\nnode_modules/@standard-schema/spec/package.json\\nnode_modules/birpc/package.json\\nnode_modules/cac/package.json\\nnode_modules/crossws/package.json\\nnode_modules/get-port-please/package.json\\nnode_modules/h3/package.json\\nnode_modules/immer/package.json\\nnode_modules/launch-editor/package.json\\nnode_modules/mlly/package.json\\nnode_modules/mrmime/package.json\\nnode_modules/nostics/package.json\\nnode_modules/obug/package.json\\nnode_modules/ohash/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/pathe/package.json\\nnode_modules/perfect-debounce/package.json\\nnode_modules/structured-clone-es/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/typescript/package.json\\nnode_modules/ua-parser-modern/package.json\\nnode_modules/valibot/package.json\\nnode_modules/whenexpr/package.json\\nnode_modules/ws/package.json" } ] }, "components": [ { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "8.22.0", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@8.22.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" }, { "type": "vcs", "url": "git+https://github.com/websockets/ws.git" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "whenexpr", "version": "0.1.2", "description": "Tiny when-clause expression evaluator, inspired by VS Code's when clauses", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/whenexpr@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu/whenexpr#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu/whenexpr.git" } ], "type": "library", "bom-ref": "pkg:npm/whenexpr@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/whenexpr/package.json" }, { "name": "ImportedModules", "value": "whenexpr,WhenExpression,whenexpr/WhenExpression,evaluateWhen,whenexpr/evaluateWhen,resolveContextValue,whenexpr/resolveContextValue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/whenexpr/package.json" } ], "concludedValue": "node_modules/whenexpr/package.json" } ], "occurrences": [ { "location": "src/utils/when.ts", "line": 1 }, { "location": "src/utils/when.ts", "line": 2 }, { "location": "src/utils/when.ts", "line": 57 }, { "location": "src/utils/when.ts", "line": 68 }, { "location": "dist/utils/when.d.mts", "line": 1 } ] } }, { "authors": [ { "name": "Fabian Hiller" } ], "group": "", "name": "valibot", "version": "1.5.0", "description": "The modular and type safe schema library for validating structural data", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/valibot@1.5.0", "externalReferences": [ { "type": "website", "url": "https://valibot.dev" }, { "type": "vcs", "url": "https://github.com/open-circle/valibot" } ], "type": "library", "bom-ref": "pkg:npm/valibot@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/valibot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/valibot/package.json" } ], "concludedValue": "node_modules/valibot/package.json" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "ua-parser-modern", "version": "0.1.1", "description": "Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data. Supports browser & node.js environment", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ua-parser-modern@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/ua-parser-modern" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/ua-parser-modern.git" } ], "type": "library", "bom-ref": "pkg:npm/ua-parser-modern@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ua-parser-modern/package.json" }, { "name": "ImportedModules", "value": "ua-parser-modern,parseUA,ua-parser-modern/parseUA" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ua-parser-modern/package.json" } ], "concludedValue": "node_modules/ua-parser-modern/package.json" } ], "occurrences": [ { "location": "src/node/auth/state.ts", "line": 6 }, { "location": "src/node/auth/state.ts", "line": 19 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "6.0.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@6.0.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@6.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.23.0", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.23.0", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.23.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/tinyglobby/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "structured-clone-es", "version": "2.0.1", "description": "An env-agnostic serializer and deserializer with recursion ability and types beyond JSON, based on the HTML structured clone algorithm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/structured-clone-es@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/structured-clone-es#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/structured-clone-es.git" } ], "type": "library", "bom-ref": "pkg:npm/structured-clone-es@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/structured-clone-es/package.json" }, { "name": "ImportedModules", "value": "structured-clone-es,deserialize,structured-clone-es/deserialize,parse,structured-clone-es/parse,serialize,structured-clone-es/serialize,stringify,structured-clone-es/stringify" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/structured-clone-es/package.json" } ], "concludedValue": "node_modules/structured-clone-es/package.json" } ], "occurrences": [ { "location": "src/utils/structured-clone.ts", "line": 6 }, { "location": "src/utils/structured-clone.ts", "line": 13 }, { "location": "src/utils/structured-clone.ts", "line": 20 }, { "location": "src/utils/structured-clone.ts", "line": 28 }, { "location": "src/utils/structured-clone.ts", "line": 35 } ] }, "tags": [ "html" ] }, { "group": "", "name": "perfect-debounce", "version": "2.1.0", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/perfect-debounce@2.1.0", "type": "library", "bom-ref": "pkg:npm/perfect-debounce@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/perfect-debounce/package.json" }, { "name": "ExportedModules", "value": "perfect-debounce,DebouncedReturn,perfect-debounce/DebouncedReturn,DebounceOptions,perfect-debounce/DebounceOptions" }, { "name": "ImportedModules", "value": "perfect-debounce" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/perfect-debounce/package.json" } ], "concludedValue": "node_modules/perfect-debounce/package.json" } ], "occurrences": [ { "location": "src/utils/debounce.ts", "line": 7 }, { "location": "src/utils/debounce.ts", "line": 8 } ] } }, { "group": "", "name": "pathe", "version": "2.0.3", "description": "Universal filesystem path utils", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pathe@2.0.3", "type": "library", "bom-ref": "pkg:npm/pathe@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/pathe/package.json" }, { "name": "ImportedModules", "value": "pathe,resolve,pathe/resolve,isAbsolute,pathe/isAbsolute,join,pathe/join,relative,pathe/relative,dirname,pathe/dirname,extname,pathe/extname,normalize,pathe/normalize,pathe/sep" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pathe/package.json" } ], "concludedValue": "node_modules/pathe/package.json" } ], "occurrences": [ { "location": "dist/adapters/build.mjs", "line": 9 }, { "location": "dist/adapters/build.mjs", "line": 26 }, { "location": "dist/adapters/build.mjs", "line": 47 }, { "location": "dist/adapters/build.mjs", "line": 66 }, { "location": "dist/context-BKw9KkCR.mjs", "line": 12 }, { "location": "dist/context-BKw9KkCR.mjs", "line": 824 }, { "location": "dist/context-BKw9KkCR.mjs", "line": 825 }, { "location": "dist/context-BKw9KkCR.mjs", "line": 826 }, { "location": "dist/context-BKw9KkCR.mjs", "line": 827 }, { "location": "dist/context-CNq7GLeT.mjs", "line": 4 }, { "location": "dist/context-CNq7GLeT.mjs", "line": 10 }, { "location": "dist/dev-BViAfnlw.mjs", "line": 10 }, { "location": "dist/dev-BViAfnlw.mjs", "line": 100 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 1 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 19 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 20 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 21 }, { "location": "dist/instance-registry-DFrZdU4B.mjs", "line": 3 }, { "location": "dist/instance-registry-DFrZdU4B.mjs", "line": 25 }, { "location": "dist/instance-registry-DFrZdU4B.mjs", "line": 48 }, { "location": "dist/instance-registry-DFrZdU4B.mjs", "line": 51 }, { "location": "dist/instance-registry-DFrZdU4B.mjs", "line": 90 }, { "location": "dist/instance-registry-DFrZdU4B.mjs", "line": 166 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 5 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 391 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 427 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 436 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 452 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 454 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 455 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 469 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 494 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 512 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 515 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 604 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 616 }, { "location": "dist/remote-assets-B9MeWmW6.mjs", "line": 665 }, { "location": "dist/services-install-D5YUwFXW.mjs", "line": 2 }, { "location": "dist/services-install-D5YUwFXW.mjs", "line": 13 }, { "location": "dist/services-install-D5YUwFXW.mjs", "line": 24 }, { "location": "dist/services-install-D5YUwFXW.mjs", "line": 25 }, { "location": "dist/storage-DPoitS2X.mjs", "line": 2 }, { "location": "dist/storage-DPoitS2X.mjs", "line": 122 }, { "location": "dist/utils/serve-static.mjs", "line": 4 }, { "location": "dist/utils/serve-static.mjs", "line": 26 }, { "location": "dist/utils/serve-static.mjs", "line": 52 }, { "location": "dist/utils/serve-static.mjs", "line": 64 }, { "location": "dist/utils/serve-static.mjs", "line": 74 }, { "location": "dist/utils/serve-static.mjs", "line": 84 }, { "location": "dist/utils/serve-static.mjs", "line": 159 }, { "location": "dist/utils/serve-static.mjs", "line": 199 }, { "location": "dist/write-DK7rBUN3.mjs", "line": 7 }, { "location": "dist/write-DK7rBUN3.mjs", "line": 86 }, { "location": "dist/write-DK7rBUN3.mjs", "line": 441 }, { "location": "dist/write-DK7rBUN3.mjs", "line": 443 }, { "location": "dist/write-DK7rBUN3.mjs", "line": 444 }, { "location": "dist/write-DK7rBUN3.mjs", "line": 448 }, { "location": "src/adapters/build.ts", "line": 10 }, { "location": "src/adapters/build.ts", "line": 61 }, { "location": "src/adapters/build.ts", "line": 96 }, { "location": "src/adapters/build.ts", "line": 122 }, { "location": "src/adapters/initiate.ts", "line": 18 }, { "location": "src/adapters/initiate.ts", "line": 326 }, { "location": "src/node/host-h3.ts", "line": 5 }, { "location": "src/node/host-h3.ts", "line": 54 }, { "location": "src/node/host-h3.ts", "line": 56 }, { "location": "src/node/host-h3.ts", "line": 57 }, { "location": "src/node/hub-internals/context.ts", "line": 4 }, { "location": "src/node/hub-internals/context.ts", "line": 80 }, { "location": "src/node/instance-registry.ts", "line": 4 }, { "location": "src/node/instance-registry.ts", "line": 65 }, { "location": "src/node/instance-registry.ts", "line": 93 }, { "location": "src/node/instance-registry.ts", "line": 101 }, { "location": "src/node/instance-registry.ts", "line": 139 }, { "location": "src/node/instance-registry.ts", "line": 261 }, { "location": "src/node/services-install.ts", "line": 3 }, { "location": "src/node/services-install.ts", "line": 18 }, { "location": "src/node/services-install.ts", "line": 30 }, { "location": "src/node/services-install.ts", "line": 32 }, { "location": "src/node/settings.ts", "line": 3 }, { "location": "src/node/settings.ts", "line": 19 }, { "location": "src/node/settings.ts", "line": 20 }, { "location": "src/node/settings.ts", "line": 21 }, { "location": "src/node/settings.ts", "line": 23 }, { "location": "src/node/storage.ts", "line": 5 }, { "location": "src/node/storage.ts", "line": 55 }, { "location": "src/rpc/dump/write.ts", "line": 5 }, { "location": "src/rpc/dump/write.ts", "line": 28 }, { "location": "src/rpc/dump/write.ts", "line": 30 }, { "location": "src/rpc/dump/write.ts", "line": 31 }, { "location": "src/rpc/dump/write.ts", "line": 45 }, { "location": "src/utils/remote-assets.ts", "line": 14 }, { "location": "src/utils/remote-assets.ts", "line": 124 }, { "location": "src/utils/remote-assets.ts", "line": 173 }, { "location": "src/utils/remote-assets.ts", "line": 185 }, { "location": "src/utils/remote-assets.ts", "line": 204 }, { "location": "src/utils/remote-assets.ts", "line": 207 }, { "location": "src/utils/remote-assets.ts", "line": 209 }, { "location": "src/utils/remote-assets.ts", "line": 222 }, { "location": "src/utils/remote-assets.ts", "line": 251 }, { "location": "src/utils/remote-assets.ts", "line": 274 }, { "location": "src/utils/remote-assets.ts", "line": 277 }, { "location": "src/utils/remote-assets.ts", "line": 364 }, { "location": "src/utils/remote-assets.ts", "line": 379 }, { "location": "src/utils/remote-assets.ts", "line": 441 }, { "location": "src/utils/serve-static.ts", "line": 10 }, { "location": "src/utils/serve-static.ts", "line": 51 }, { "location": "src/utils/serve-static.ts", "line": 82 }, { "location": "src/utils/serve-static.ts", "line": 100 }, { "location": "src/utils/serve-static.ts", "line": 121 }, { "location": "src/utils/serve-static.ts", "line": 139 }, { "location": "src/utils/serve-static.ts", "line": 238 }, { "location": "src/utils/serve-static.ts", "line": 292 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "7.3.3", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@7.3.3", "type": "library", "bom-ref": "pkg:npm/p-limit@7.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "ImportedModules", "value": "p-limit" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ], "occurrences": [ { "location": "src/rpc/dump/collect.ts", "line": 11 }, { "location": "src/rpc/dump/collect.ts", "line": 54 } ] } }, { "group": "", "name": "ohash", "version": "2.0.12", "description": "Simple object hashing, serialization and comparison utils.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ohash@2.0.12", "type": "library", "bom-ref": "pkg:npm/ohash@2.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/ohash/package.json" }, { "name": "ImportedModules", "value": "ohash,hash,ohash/hash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ohash/package.json" } ], "concludedValue": "node_modules/ohash/package.json" } ], "occurrences": [ { "location": "src/utils/hash.ts", "line": 1 }, { "location": "src/utils/hash.ts", "line": 7 } ] }, "tags": [ "serialization" ] }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "obug", "version": "3.0.0", "description": "A lightweight JavaScript debugging utility, forked from debug, featuring TypeScript and ESM support.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/obug@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sxzz/obug#readme" }, { "type": "vcs", "url": "git+https://github.com/sxzz/obug.git" } ], "type": "library", "bom-ref": "pkg:npm/obug@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/obug/package.json" }, { "name": "ImportedModules", "value": "obug,createDebug,obug/createDebug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/obug/package.json" } ], "concludedValue": "node_modules/obug/package.json" } ], "occurrences": [ { "location": "src/node/host-functions.ts", "line": 7 }, { "location": "src/node/host-functions.ts", "line": 14 }, { "location": "src/node/host-services.ts", "line": 13 }, { "location": "src/node/host-services.ts", "line": 17 }, { "location": "src/node/rpc-shared-state.ts", "line": 4 }, { "location": "src/node/rpc-shared-state.ts", "line": 8 }, { "location": "src/node/rpc-shared-state.ts", "line": 9 }, { "location": "src/node/rpc-streaming.ts", "line": 10 }, { "location": "src/node/rpc-streaming.ts", "line": 14 }, { "location": "src/utils/remote-assets.ts", "line": 13 }, { "location": "src/utils/remote-assets.ts", "line": 17 }, { "location": "src/utils/remote-assets.ts", "line": 18 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "nostics", "version": "1.3.0", "description": "Structured diagnostic code library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nostics@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vercel-labs/nostics#readme" }, { "type": "vcs", "url": "git+https://github.com/vercel-labs/nostics.git" } ], "type": "library", "bom-ref": "pkg:npm/nostics@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nostics/package.json" }, { "name": "ExportedModules", "value": "nostics,nostics/formatters/ansi,createConsoleReporter,nostics/createConsoleReporter,defineProdDiagnostics,nostics/defineProdDiagnostics,Diagnostic,nostics/Diagnostic,formatDiagnostic,nostics/formatDiagnostic,AnyDiagnosticReporter,nostics/AnyDiagnosticReporter,ConsoleMethod,nostics/ConsoleMethod,ConsoleReporterOptions,nostics/ConsoleReporterOptions,DiagnosticCallParams,nostics/DiagnosticCallParams,DiagnosticDefinition,nostics/DiagnosticDefinition,DiagnosticHandle,nostics/DiagnosticHandle,DiagnosticInit,nostics/DiagnosticInit,DiagnosticReporter,nostics/DiagnosticReporter,Diagnostics,nostics/Diagnostics" }, { "name": "ImportedModules", "value": "nostics,Diagnostic,nostics/Diagnostic,createConsoleReporter,nostics/createConsoleReporter,defineDiagnostics,nostics/defineDiagnostics,defineProdDiagnostics,nostics/defineProdDiagnostics,formatDiagnostic,nostics/formatDiagnostic,nostics/formatters/ansi,ansiFormatter,nostics/formatters/ansi/ansiFormatter,AnyDiagnosticReporter,nostics/AnyDiagnosticReporter,DiagnosticDefinition,nostics/DiagnosticDefinition,Diagnostics,nostics/Diagnostics,ConsoleMethod,nostics/ConsoleMethod,ConsoleReporterOptions,nostics/ConsoleReporterOptions,DiagnosticCallParams,nostics/DiagnosticCallParams,DiagnosticHandle,nostics/DiagnosticHandle,DiagnosticInit,nostics/DiagnosticInit,DiagnosticReporter,nostics/DiagnosticReporter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nostics/package.json" } ], "concludedValue": "node_modules/nostics/package.json" } ], "occurrences": [ { "location": "dist/nostics-D0PvLZsn.mjs", "line": 1 }, { "location": "dist/nostics-D0PvLZsn.mjs", "line": 2 }, { "location": "dist/nostics-D0PvLZsn.mjs", "line": 53 }, { "location": "dist/tool-input-CES3Pc4y.mjs", "line": 2 }, { "location": "dist/tool-input-CES3Pc4y.mjs", "line": 3 }, { "location": "dist/tool-input-CES3Pc4y.mjs", "line": 103 }, { "location": "src/utils/nostics.ts", "line": 1 }, { "location": "src/utils/nostics.ts", "line": 3 }, { "location": "src/utils/nostics.ts", "line": 4 }, { "location": "src/utils/nostics.ts", "line": 45 }, { "location": "src/utils/nostics.ts", "line": 69 }, { "location": "src/utils/nostics.ts", "line": 81 }, { "location": "src/utils/nostics.ts", "line": 83 }, { "location": "dist/nostics-DWvukRwa.d.mts", "line": 1 }, { "location": "dist/nostics-DWvukRwa.d.mts", "line": 2 }, { "location": "dist/nostics-D0PvLZsn.mjs", "line": 34 }, { "location": "dist/tool-input-CES3Pc4y.mjs", "line": 84 }, { "location": "src/utils/nostics.ts", "line": 6 } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "mrmime", "version": "2.0.1", "description": "A tiny (2.8kB) and fast utility for getting a MIME type from an extension or filename", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mrmime@2.0.1", "type": "library", "bom-ref": "pkg:npm/mrmime@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mrmime/package.json" }, { "name": "ImportedModules", "value": "mrmime,lookup,mrmime/lookup" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mrmime/package.json" } ], "concludedValue": "node_modules/mrmime/package.json" } ], "occurrences": [ { "location": "src/utils/remote-assets.ts", "line": 12 }, { "location": "src/utils/remote-assets.ts", "line": 133 }, { "location": "src/utils/serve-static.ts", "line": 9 }, { "location": "src/utils/serve-static.ts", "line": 148 } ] } }, { "group": "", "name": "mlly", "version": "1.8.2", "description": "Missing ECMAScript module utils for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mlly@1.8.2", "type": "library", "bom-ref": "pkg:npm/mlly@1.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/mlly/package.json" }, { "name": "ImportedModules", "value": "mlly,findDynamicImports,mlly/findDynamicImports,findExports,mlly/findExports,findStaticImports,mlly/findStaticImports" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mlly/package.json" } ], "concludedValue": "node_modules/mlly/package.json" } ], "occurrences": [ { "location": "scripts/check-client-dist.ts", "line": 3 }, { "location": "scripts/check-client-dist.ts", "line": 37 }, { "location": "scripts/check-client-dist.ts", "line": 39 }, { "location": "scripts/check-client-dist.ts", "line": 44 } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "", "name": "launch-editor", "version": "2.14.2", "description": "launch editor from node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/launch-editor@2.14.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitejs/launch-editor#readme" }, { "type": "vcs", "url": "git+https://github.com/vitejs/launch-editor.git" } ], "type": "library", "bom-ref": "pkg:npm/launch-editor@2.14.2", "properties": [ { "name": "SrcFile", "value": "node_modules/launch-editor/package.json" }, { "name": "ImportedModules", "value": "launch-editor" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/launch-editor/package.json" } ], "concludedValue": "node_modules/launch-editor/package.json" } ], "occurrences": [ { "location": "src/utils/launch-editor.ts", "line": 1 }, { "location": "src/utils/launch-editor.ts", "line": 88 } ] } }, { "authors": [ { "name": "Michel Weststrate " } ], "group": "", "name": "immer", "version": "11.1.21", "description": "Create your next immutable state by mutating the current one", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/immer@11.1.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/immerjs/immer#readme" }, { "type": "vcs", "url": "https://github.com/immerjs/immer.git" } ], "type": "library", "bom-ref": "pkg:npm/immer@11.1.21", "properties": [ { "name": "SrcFile", "value": "node_modules/immer/package.json" }, { "name": "ImportedModules", "value": "immer,Objectish,immer/Objectish,Patch,immer/Patch,applyPatches,immer/applyPatches,enablePatches,immer/enablePatches,produce,immer/produce,produceWithPatches,immer/produceWithPatches" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/immer/package.json" } ], "concludedValue": "node_modules/immer/package.json" } ], "occurrences": [ { "location": "src/utils/shared-state.ts", "line": 2 }, { "location": "src/utils/shared-state.ts", "line": 3 }, { "location": "src/utils/shared-state.ts", "line": 100 }, { "location": "src/utils/shared-state.ts", "line": 113 }, { "location": "src/utils/shared-state.ts", "line": 114 }, { "location": "src/utils/shared-state.ts", "line": 125 }, { "location": "src/utils/shared-state.ts", "line": 135 } ] } }, { "group": "", "name": "h3", "version": "2.0.1", "description": "Minimal H(TTP) framework built for high performance and portability.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/h3@2.0.1", "externalReferences": [ { "type": "website", "url": "https://h3.dev" } ], "type": "framework", "bom-ref": "pkg:npm/h3@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/h3/package.json" }, { "name": "ImportedModules", "value": "h3,h3/H3,toNodeHandler,h3/toNodeHandler,defineHandler,h3/defineHandler,h3/node,H3Event,h3/H3Event,EventHandler,h3/EventHandler" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/h3/package.json" } ], "concludedValue": "node_modules/h3/package.json" } ], "occurrences": [ { "location": "dist/dev-BViAfnlw.mjs", "line": 13 }, { "location": "dist/dev-BViAfnlw.mjs", "line": 178 }, { "location": "dist/instance-shell-DmyVIJzj.mjs", "line": 11 }, { "location": "dist/instance-shell-DmyVIJzj.mjs", "line": 71 }, { "location": "dist/instance-shell-DmyVIJzj.mjs", "line": 518 }, { "location": "dist/instance-shell-DmyVIJzj.mjs", "line": 584 }, { "location": "dist/instance-shell-DmyVIJzj.mjs", "line": 585 }, { "location": "dist/utils/serve-static.mjs", "line": 7 }, { "location": "dist/utils/serve-static.mjs", "line": 129 }, { "location": "dist/utils/serve-static.mjs", "line": 162 }, { "location": "src/adapters/cac.ts", "line": 10 }, { "location": "src/adapters/dev.ts", "line": 10 }, { "location": "src/adapters/dev.ts", "line": 159 }, { "location": "src/adapters/initiate.ts", "line": 17 }, { "location": "src/node/agentic.ts", "line": 1 }, { "location": "src/node/instance-shell.ts", "line": 5 }, { "location": "src/node/instance-shell.ts", "line": 20 }, { "location": "src/node/instance-shell.ts", "line": 98 }, { "location": "src/node/instance-shell.ts", "line": 818 }, { "location": "src/node/instance-shell.ts", "line": 918 }, { "location": "src/node/instance-shell.ts", "line": 919 }, { "location": "src/utils/serve-static.ts", "line": 1 }, { "location": "src/utils/serve-static.ts", "line": 8 }, { "location": "src/utils/serve-static.ts", "line": 203 }, { "location": "src/utils/serve-static.ts", "line": 243 }, { "location": "dist/adapters/cac.d.mts", "line": 3 }, { "location": "dist/adapters/dev.d.mts", "line": 7 }, { "location": "dist/adapters/initiate.d.mts", "line": 6 }, { "location": "dist/agentic-D61fXLzA.d.mts", "line": 2 }, { "location": "dist/instance-shell-fl3ir6RC.d.mts", "line": 6 }, { "location": "dist/utils/serve-static.d.mts", "line": 2 } ] }, "tags": [ "framework", "performance" ] }, { "group": "", "name": "get-port-please", "version": "3.2.0", "description": "Get an available TCP port to listen", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-port-please@3.2.0", "type": "library", "bom-ref": "pkg:npm/get-port-please@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-port-please/package.json" }, { "name": "ExportedModules", "value": "get-port-please,GetPortInput,get-port-please/GetPortInput,GetPortOptions,get-port-please/GetPortOptions" }, { "name": "ImportedModules", "value": "get-port-please,getPort,get-port-please/getPort" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-port-please/package.json" } ], "concludedValue": "node_modules/get-port-please/package.json" } ], "occurrences": [ { "location": "src/adapters/_shared.ts", "line": 6 }, { "location": "src/adapters/_shared.ts", "line": 58 }, { "location": "src/node/instance-shell.ts", "line": 734 }, { "location": "src/utils/get-port.ts", "line": 5 }, { "location": "src/utils/get-port.ts", "line": 6 } ] } }, { "group": "", "name": "crossws", "version": "0.4.12", "description": "Cross-platform WebSocket Servers for Node.js, Deno, Bun and Cloudflare Workers", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crossws@0.4.12", "externalReferences": [ { "type": "website", "url": "https://crossws.h3.dev" } ], "type": "library", "bom-ref": "pkg:npm/crossws@0.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/crossws/package.json" }, { "name": "ImportedModules", "value": "crossws/adapters/bun,crossws/adapters/deno,crossws/adapters/node,NodeAdapter,crossws/adapters/node/NodeAdapter,crossws,Hooks,crossws/Hooks,Peer,crossws/Peer" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crossws/package.json" } ], "concludedValue": "node_modules/crossws/package.json" } ], "occurrences": [ { "location": "dist/rpc/transports/ws-bun.mjs", "line": 12 }, { "location": "src/rpc/transports/ws-bun.ts", "line": 41 }, { "location": "dist/rpc/transports/ws-deno.mjs", "line": 12 }, { "location": "dist/rpc/transports/ws-server.mjs", "line": 8 }, { "location": "src/node/instance-shell.ts", "line": 2 }, { "location": "src/rpc/transports/ws-deno.ts", "line": 31 }, { "location": "src/rpc/transports/ws-server.ts", "line": 2 }, { "location": "src/rpc/transports/ws-server.ts", "line": 3 }, { "location": "src/rpc/transports/ws-server.ts", "line": 13 }, { "location": "dist/instance-shell-fl3ir6RC.d.mts", "line": 7 }, { "location": "dist/ws-server-y2R76aSW.d.mts", "line": 4 }, { "location": "dist/ws-server-y2R76aSW.d.mts", "line": 5 }, { "location": "dist/rpc/transports/ws-server.mjs", "line": 180 }, { "location": "src/rpc/transports/ws-server.ts", "line": 403 } ] } }, { "authors": [ { "name": "egoist <0x142857@gmail.com>" } ], "group": "", "name": "cac", "version": "7.0.0", "description": "Simple yet powerful framework for building command-line apps.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cac@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cacjs/cac#readme" }, { "type": "vcs", "url": "git+https://github.com/cacjs/cac.git" } ], "type": "framework", "bom-ref": "pkg:npm/cac@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cac/package.json" }, { "name": "ImportedModules", "value": "cac,cac/cac,cac/CAC" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cac/package.json" } ], "concludedValue": "node_modules/cac/package.json" } ], "occurrences": [ { "location": "dist/adapters/cac.mjs", "line": 6 }, { "location": "dist/adapters/cac.mjs", "line": 97 }, { "location": "dist/cli/main.mjs", "line": 4 }, { "location": "dist/cli/main.mjs", "line": 31 }, { "location": "src/adapters/cac.ts", "line": 9 }, { "location": "src/adapters/cac.ts", "line": 13 }, { "location": "src/adapters/cac.ts", "line": 69 }, { "location": "src/cli/main.ts", "line": 2 }, { "location": "src/cli/main.ts", "line": 45 }, { "location": "dist/adapters/cac.d.mts", "line": 2 }, { "location": "dist/context-DhycZ2lx.d.mts", "line": 8 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "birpc", "version": "4.2.0", "description": "Message based Two-way remote procedure call", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/birpc@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/birpc#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/birpc.git" } ], "type": "library", "bom-ref": "pkg:npm/birpc@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/birpc/package.json" }, { "name": "ExportedModules", "value": "birpc,BirpcFn,birpc/BirpcFn,BirpcReturn,birpc/BirpcReturn" }, { "name": "ImportedModules", "value": "birpc,ChannelOptions,birpc/ChannelOptions,BirpcOptions,birpc/BirpcOptions,BirpcReturn,birpc/BirpcReturn,createBirpc,birpc/createBirpc,BirpcGroup,birpc/BirpcGroup,EventOptions,birpc/EventOptions,createBirpcGroup,birpc/createBirpcGroup" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/birpc/package.json" } ], "concludedValue": "node_modules/birpc/package.json" } ], "occurrences": [ { "location": "src/client/rpc-live.ts", "line": 1 }, { "location": "src/client/rpc.ts", "line": 1 }, { "location": "src/in-page-channel/internal.ts", "line": 2 }, { "location": "src/in-page-channel/internal.ts", "line": 6 }, { "location": "src/in-page-channel/internal.ts", "line": 340 }, { "location": "src/node/host-functions.ts", "line": 1 }, { "location": "src/node/instance-shell.ts", "line": 1 }, { "location": "src/node/rpc-core.ts", "line": 1 }, { "location": "src/rpc/client.ts", "line": 1 }, { "location": "src/rpc/client.ts", "line": 2 }, { "location": "src/rpc/client.ts", "line": 15 }, { "location": "src/rpc/server.ts", "line": 1 }, { "location": "src/rpc/server.ts", "line": 2 }, { "location": "src/rpc/server.ts", "line": 13 }, { "location": "src/rpc/transports/sse-client.ts", "line": 1 }, { "location": "src/rpc/transports/sse-server.ts", "line": 1 }, { "location": "src/rpc/transports/ws-client.ts", "line": 1 }, { "location": "src/rpc/transports/ws-server.ts", "line": 1 }, { "location": "src/rpc/types.ts", "line": 4 } ] } }, { "authors": [ { "name": "Colin McDonnell" } ], "group": "@standard-schema", "name": "spec", "version": "1.1.0", "description": "A family of specs for interoperable TypeScript", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40standard-schema/spec@1.1.0", "externalReferences": [ { "type": "website", "url": "https://standardschema.dev" }, { "type": "vcs", "url": "https://github.com/standard-schema/standard-schema" } ], "type": "library", "bom-ref": "pkg:npm/@standard-schema/spec@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@standard-schema/spec/package.json" }, { "name": "ExportedModules", "value": "@standard-schema/spec" }, { "name": "ImportedModules", "value": "@standard-schema/spec,StandardSchemaV1,@standard-schema/spec/StandardSchemaV1,StandardJSONSchemaV1,@standard-schema/spec/StandardJSONSchemaV1" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@standard-schema/spec/package.json" } ], "concludedValue": "node_modules/@standard-schema/spec/package.json" } ], "occurrences": [ { "location": "src/adapters/flags.ts", "line": 1 }, { "location": "src/agent/to-json-schema.ts", "line": 1 }, { "location": "src/in-page-channel/internal.ts", "line": 1 }, { "location": "src/rpc/types.ts", "line": 1 }, { "location": "src/rpc/utils.ts", "line": 1 }, { "location": "src/rpc/validate-io.ts", "line": 1 }, { "location": "src/utils/simple-schema.ts", "line": 1 }, { "location": "src/utils/simple-schema.ts", "line": 9 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@devframes", "name": "agentic", "version": "1.2.5", "description": "Agent-surface implementation for devframe: installing it next to devframe enables the MCP adapter (devframe/adapters/mcp) and the devframe connect gateway.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40devframes/agentic@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ], "type": "library", "bom-ref": "pkg:npm/@devframes/agentic@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@devframes/agentic/package.json" }, { "name": "ExportedModules", "value": "@devframes/agentic/mcp,createMcpFetchHandler,@devframes/agentic/mcp/createMcpFetchHandler,createMcpServer,@devframes/agentic/mcp/createMcpServer,mountMcpHttp,@devframes/agentic/mcp/mountMcpHttp" }, { "name": "ImportedModules", "value": "@devframes/agentic/mcp,createMcpFetchHandler,@devframes/agentic/mcp/createMcpFetchHandler,createMcpServer,@devframes/agentic/mcp/createMcpServer,mountMcpHttp,@devframes/agentic/mcp/mountMcpHttp" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@devframes/agentic/package.json" } ], "concludedValue": "node_modules/@devframes/agentic/package.json" } ], "occurrences": [ { "location": "dist/adapters/mcp.mjs", "line": 1 }, { "location": "src/adapters/mcp.ts", "line": 14 }, { "location": "dist/adapters/mcp.d.mts", "line": 3 } ] }, "tags": [ "connect" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/devframe@1.2.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-14T06:38:03Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'devframe' with version '1.2.5'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 25 source files." } ] }