{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:be515d44-5a17-4bb8-89e5-9eea8e1dd7b0", "version": 1, "metadata": { "timestamp": "2026-11-11T15:08:31Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "vite-plus-core", "group": "@voidzero-dev", "version": "0.2.7-tuxcare.1", "description": "The Unified Toolchain for the Web", "purl": "pkg:npm/%40voidzero-dev/vite-plus-core@0.2.7-tuxcare.1", "bom-ref": "pkg:npm/@voidzero-dev/vite-plus-core@0.2.7-tuxcare.1", "author": "VoidZero Inc.", "properties": [ { "name": "cdx:npm:scripts", "value": "build" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://viteplus.dev/guide" }, { "type": "vcs", "url": "git+https://github.com/voidzero-dev/vite-plus.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@arethetypeswrong\\n@ast-grep\\n@babel\\n@oxc-node\\n@oxc-project\\n@tsdown\\n@types\\n@vitejs\\n@voidzero-dev" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@arethetypeswrong/core/package.json\\nnode_modules/@ast-grep/napi/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@oxc-node/cli/package.json\\nnode_modules/@oxc-node/core/package.json\\nnode_modules/@oxc-project/runtime/package.json\\nnode_modules/@oxc-project/types/package.json\\nnode_modules/@tsdown/css/package.json\\nnode_modules/@tsdown/exe/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@vitejs/devtools/package.json\\nnode_modules/es-module-lexer/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/hookable/package.json\\nnode_modules/jiti/package.json\\nnode_modules/less/package.json\\nnode_modules/lightningcss/package.json\\nnode_modules/magic-string/package.json\\nnode_modules/oxc-parser/package.json\\nnode_modules/oxfmt/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pkg-types/package.json\\nnode_modules/postcss/package.json\\nnode_modules/publint/package.json\\nnode_modules/rolldown-plugin-dts/package.json\\nnode_modules/rolldown/package.json\\nnode_modules/rollup-plugin-license/package.json\\nnode_modules/rollup/package.json\\nnode_modules/sass-embedded/package.json\\nnode_modules/sass/package.json\\nnode_modules/semver/package.json\\nnode_modules/stylus/package.json\\nnode_modules/sugarss/package.json\\nnode_modules/terser/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/tree-kill/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/tsx/package.json\\nnode_modules/typescript/package.json\\nnode_modules/unplugin-unused/package.json\\nnode_modules/unrun/package.json\\nnode_modules/vite/package.json\\nnode_modules/yaml/package.json\\nnode_modules/yuku-codegen/package.json\\nnode_modules/yuku-parser/package.json" } ] }, "components": [ { "group": "", "name": "yuku-parser", "version": "0.5.44", "description": "High-performance JavaScript/TypeScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yuku-parser@0.5.44", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yuku-toolchain/yuku" } ], "type": "library", "bom-ref": "pkg:npm/yuku-parser@0.5.44", "properties": [ { "name": "SrcFile", "value": "node_modules/yuku-parser/package.json" }, { "name": "ImportedModules", "value": "yuku-parser,parse,yuku-parser/parse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yuku-parser/package.json" } ], "concludedValue": "node_modules/yuku-parser/package.json" } ], "occurrences": [ { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 17 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1550 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1568 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1623 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1765 } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yuku-codegen", "version": "0.5.44", "description": "High-performance JavaScript/TypeScript code generator written in Zig", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yuku-codegen@0.5.44", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yuku-toolchain/yuku" } ], "type": "library", "bom-ref": "pkg:npm/yuku-codegen@0.5.44", "properties": [ { "name": "SrcFile", "value": "node_modules/yuku-codegen/package.json" }, { "name": "ImportedModules", "value": "yuku-codegen,print,yuku-codegen/print" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yuku-codegen/package.json" } ], "concludedValue": "node_modules/yuku-codegen/package.json" } ], "occurrences": [ { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 16 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1748 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1848 } ] } }, { "authors": [ { "name": "Eemeli Aro " } ], "group": "", "name": "yaml", "version": "2.9.0", "description": "JavaScript parser and stringifier for YAML", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@2.9.0", "externalReferences": [ { "type": "website", "url": "https://eemeli.org/yaml/" } ], "type": "library", "bom-ref": "pkg:npm/yaml@2.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yaml/package.json" }, { "name": "ImportedModules", "value": "yaml" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yaml/package.json" } ], "concludedValue": "node_modules/yaml/package.json" } ], "occurrences": [ { "location": "dist/tsdown/src-CPDzmpAq.js", "line": 535 } ] } }, { "authors": [ { "name": "VoidZero Inc." } ], "group": "@voidzero-dev", "name": "vite-plus-core", "version": "0.2.7-tuxcare.1", "description": "The Unified Toolchain for the Web", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40voidzero-dev/vite-plus-core@0.2.7-tuxcare.1", "externalReferences": [ { "type": "website", "url": "https://viteplus.dev/guide" }, { "type": "vcs", "url": "git+https://github.com/voidzero-dev/vite-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/@voidzero-dev/vite-plus-core@0.2.7-tuxcare.1", "properties": [ { "name": "SrcFile", "value": "node_modules/vite/package.json" }, { "name": "ImportedModules", "value": "@voidzero-dev/vite-plus-core/rolldown,VERSION,@voidzero-dev/vite-plus-core/rolldown/VERSION,build,@voidzero-dev/vite-plus-core/rolldown/build,watch,@voidzero-dev/vite-plus-core/rolldown/watch,RUNTIME_MODULE_ID,@voidzero-dev/vite-plus-core/rolldown/RUNTIME_MODULE_ID,rolldown,@voidzero-dev/vite-plus-core/rolldown/rolldown,@voidzero-dev/vite-plus-core/rolldown/filter,@voidzero-dev/vite-plus-core/rolldown/filter/and,@voidzero-dev/vite-plus-core/rolldown/filter/id,importerId,@voidzero-dev/vite-plus-core/rolldown/filter/importerId,include,@voidzero-dev/vite-plus-core/rolldown/filter/include,exactRegex,@voidzero-dev/vite-plus-core/rolldown/filter/exactRegex,makeIdFiltersToMatchWithQuery,@voidzero-dev/vite-plus-core/rolldown/filter/makeIdFiltersToMatchWithQuery,prefixRegex,@voidzero-dev/vite-plus-core/rolldown/filter/prefixRegex,withFilter,@voidzero-dev/vite-plus-core/rolldown/filter/withFilter,@voidzero-dev/vite-plus-core/rolldown/utils,Visitor,@voidzero-dev/vite-plus-core/rolldown/utils/Visitor,parse,@voidzero-dev/vite-plus-core/rolldown/utils/parse,TsconfigCache,@voidzero-dev/vite-plus-core/rolldown/utils/TsconfigCache,minify,@voidzero-dev/vite-plus-core/rolldown/utils/minify,minifySync,@voidzero-dev/vite-plus-core/rolldown/utils/minifySync,parseSync,@voidzero-dev/vite-plus-core/rolldown/utils/parseSync,transformSync,@voidzero-dev/vite-plus-core/rolldown/utils/transformSync,@voidzero-dev/vite-plus-core/rolldown/experimental,importGlobPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/importGlobPlugin,ResolverFactory,@voidzero-dev/vite-plus-core/rolldown/experimental/ResolverFactory,isolatedDeclarationSync,@voidzero-dev/vite-plus-core/rolldown/experimental/isolatedDeclarationSync,@voidzero-dev/vite-plus-core/rolldown/experimental/dev,oxcRuntimePlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/oxcRuntimePlugin,resolveTsconfig,@voidzero-dev/vite-plus-core/rolldown/experimental/resolveTsconfig,scan,@voidzero-dev/vite-plus-core/rolldown/experimental/scan,viteAliasPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteAliasPlugin,viteBuildImportAnalysisPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteBuildImportAnalysisPlugin,viteDynamicImportVarsPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteDynamicImportVarsPlugin,viteImportGlobPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteImportGlobPlugin,viteJsonPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteJsonPlugin,viteLoadFallbackPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteLoadFallbackPlugin,viteManifestPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteManifestPlugin,viteModulePreloadPolyfillPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteModulePreloadPolyfillPlugin,viteReporterPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteReporterPlugin,viteResolvePlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteResolvePlugin,viteTransformPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteTransformPlugin,viteWebWorkerPostPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteWebWorkerPostPlugin,viteReactRefreshWrapperPlugin,@voidzero-dev/vite-plus-core/rolldown/experimental/viteReactRefreshWrapperPlugin,@voidzero-dev/vite-plus-core/rolldown/parseAst,parseAst,@voidzero-dev/vite-plus-core/rolldown/parseAst/parseAst,parseAstAsync,@voidzero-dev/vite-plus-core/rolldown/parseAst/parseAstAsync,@voidzero-dev/vite-plus-core/rolldown/plugins,esmExternalRequirePlugin,@voidzero-dev/vite-plus-core/rolldown/plugins/esmExternalRequirePlugin,@voidzero-dev/vite-plus-core/module-runner,ESModulesEvaluator,@voidzero-dev/vite-plus-core/module-runner/ESModulesEvaluator,ModuleRunner,@voidzero-dev/vite-plus-core/module-runner/ModuleRunner,createNodeImportMeta,@voidzero-dev/vite-plus-core/module-runner/createNodeImportMeta,@voidzero-dev/vite-plus-core/rolldown/pluginutils,TopLevelFilterExpression,@voidzero-dev/vite-plus-core/rolldown/pluginutils/TopLevelFilterExpression" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vite/package.json" } ], "concludedValue": "node_modules/vite/package.json" } ], "occurrences": [ { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 11 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 5323 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 5326 }, { "location": "dist/tsdown/index.js", "line": 3 }, { "location": "dist/tsdown/run.js", "line": 6 }, { "location": "dist/tsdown/target-Bab3CUeB-Di6tCARH.js", "line": 4 }, { "location": "dist/vite/node/chunks/node.js", "line": 14 }, { "location": "dist/vite/node/chunks/node.js", "line": 32556 }, { "location": "dist/vite/node/chunks/node.js", "line": 32562 }, { "location": "dist/vite/node/chunks/node.js", "line": 37268 }, { "location": "dist/vite/node/chunks/node.js", "line": 37462 }, { "location": "dist/vite/node/chunks/node.js", "line": 38660 }, { "location": "dist/vite/node/chunks/node.js", "line": 38685 }, { "location": "dist/vite/node/chunks/node.js", "line": 38687 }, { "location": "dist/vite/node/chunks/node.js", "line": 41682 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 13 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 117 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 196 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 209 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 213 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 248 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 250 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 283 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 4243 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 13 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 2544 }, { "location": "dist/tsdown/target-Bab3CUeB-Di6tCARH.js", "line": 6 }, { "location": "dist/tsdown/target-Bab3CUeB-Di6tCARH.js", "line": 64 }, { "location": "dist/vite/node/chunks/node.js", "line": 21 }, { "location": "dist/vite/node/chunks/node.js", "line": 26471 }, { "location": "dist/vite/node/chunks/node.js", "line": 26484 }, { "location": "dist/vite/node/chunks/node.js", "line": 29322 }, { "location": "dist/vite/node/chunks/node.js", "line": 29328 }, { "location": "dist/vite/node/chunks/node.js", "line": 33392 }, { "location": "dist/vite/node/chunks/node.js", "line": 33399 }, { "location": "dist/vite/node/chunks/node.js", "line": 34106 }, { "location": "dist/vite/node/chunks/node.js", "line": 34339 }, { "location": "dist/vite/node/chunks/node.js", "line": 34345 }, { "location": "dist/vite/node/chunks/node.js", "line": 34352 }, { "location": "dist/vite/node/chunks/node.js", "line": 36843 }, { "location": "dist/vite/node/chunks/node.js", "line": 36875 }, { "location": "dist/vite/node/chunks/node.js", "line": 36935 }, { "location": "dist/vite/node/chunks/node.js", "line": 36949 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 17 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 155 }, { "location": "dist/vite/node/chunks/node.js", "line": 4 }, { "location": "dist/vite/node/chunks/node.js", "line": 1147 }, { "location": "dist/vite/node/chunks/node.js", "line": 2008 }, { "location": "dist/vite/node/chunks/node.js", "line": 2092 }, { "location": "dist/vite/node/chunks/node.js", "line": 2093 }, { "location": "dist/vite/node/chunks/node.js", "line": 6692 }, { "location": "dist/vite/node/chunks/node.js", "line": 8540 }, { "location": "dist/vite/node/chunks/node.js", "line": 9452 }, { "location": "dist/vite/node/chunks/node.js", "line": 9471 }, { "location": "dist/vite/node/chunks/node.js", "line": 10230 }, { "location": "dist/vite/node/chunks/node.js", "line": 10234 }, { "location": "dist/vite/node/chunks/node.js", "line": 11126 }, { "location": "dist/vite/node/chunks/node.js", "line": 11978 }, { "location": "dist/vite/node/chunks/node.js", "line": 12054 }, { "location": "dist/vite/node/chunks/node.js", "line": 12055 }, { "location": "dist/vite/node/chunks/node.js", "line": 13581 }, { "location": "dist/vite/node/chunks/node.js", "line": 17916 }, { "location": "dist/vite/node/chunks/node.js", "line": 17922 }, { "location": "dist/vite/node/chunks/node.js", "line": 20940 }, { "location": "dist/vite/node/chunks/node.js", "line": 22133 }, { "location": "dist/vite/node/chunks/node.js", "line": 29403 }, { "location": "dist/vite/node/chunks/node.js", "line": 30410 }, { "location": "dist/vite/node/chunks/node.js", "line": 36461 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 25 }, { "location": "dist/tsdown/build-D_enfyvD-DX5mX46j.js", "line": 5057 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 15 }, { "location": "dist/tsdown/dist-CWolxbYK.js", "line": 1443 }, { "location": "dist/tsdown/tsdown-css.js", "line": 8 }, { "location": "dist/vite/node/chunks/node.js", "line": 22 }, { "location": "dist/vite/node/chunks/node.js", "line": 2039 }, { "location": "dist/vite/node/chunks/node.js", "line": 5137 }, { "location": "dist/vite/node/chunks/node.js", "line": 5197 }, { "location": "dist/vite/node/chunks/node.js", "line": 6762 }, { "location": "dist/vite/node/chunks/node.js", "line": 12009 }, { "location": "dist/vite/node/chunks/node.js", "line": 27505 }, { "location": "dist/vite/node/chunks/node.js", "line": 29318 }, { "location": "dist/vite/node/chunks/node.js", "line": 32640 }, { "location": "dist/vite/node/chunks/node.js", "line": 34066 }, { "location": "dist/vite/node/chunks/node.js", "line": 34327 }, { "location": "dist/vite/node/chunks/node.js", "line": 34399 }, { "location": "dist/vite/node/chunks/node.js", "line": 35394 }, { "location": "dist/vite/node/chunks/node.js", "line": 35424 }, { "location": "dist/vite/node/chunks/node.js", "line": 35430 }, { "location": "dist/vite/node/chunks/node.js", "line": 36353 }, { "location": "dist/vite/node/chunks/node.js", "line": 36391 }, { "location": "dist/vite/node/chunks/node.js", "line": 37724 }, { "location": "dist/vite/node/chunks/node.js", "line": 38544 }, { "location": "dist/vite/node/chunks/node.js", "line": 40026 }, { "location": "dist/vite/node/internal.js", "line": 1 }, { "location": "dist/vite/node/chunks/node.js", "line": 2 }, { "location": "dist/vite/node/chunks/node.js", "line": 16781 }, { "location": "dist/vite/node/chunks/node.js", "line": 33280 }, { "location": "dist/vite/node/chunks/node.js", "line": 33634 }, { "location": "dist/vite/node/chunks/node.js", "line": 34270 }, { "location": "dist/vite/node/chunks/node.js", "line": 34530 }, { "location": "dist/vite/node/chunks/node.js", "line": 35952 }, { "location": "dist/vite/node/chunks/node.js", "line": 3 }, { "location": "dist/vite/node/chunks/node.js", "line": 38603 }, { "location": "dist/vite/node/chunks/node.js", "line": 35 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 8 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1032 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1033 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1035 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1036 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1040 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1058 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1060 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1061 }, { "location": "dist/rolldown/shared/bindingify-input-options-DVQ4K-zY.mjs", "line": 1062 }, { "location": "dist/rolldown/shared/define-config-B-IDOhDz.d.mts", "line": 3 } ] } }, { "authors": [ { "name": "Augustin Mercier " } ], "group": "", "name": "unrun", "version": "0.3.1", "description": "A tool to load and execute any JavaScript or TypeScript code at runtime.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unrun@0.3.1", "externalReferences": [ { "type": "vcs", "url": "https://gugustinette.github.io/unrun/" }, { "type": "vcs", "url": "git+https://github.com/Gugustinette/unrun.git" } ], "type": "library", "bom-ref": "pkg:npm/unrun@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/unrun/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unrun/package.json" } ], "concludedValue": "node_modules/unrun/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "unplugin-unused", "version": "0.5.6", "description": "Check unused dependencies.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unplugin-unused@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unplugin/unplugin-unused#readme" }, { "type": "vcs", "url": "git+https://github.com/unplugin/unplugin-unused.git" } ], "type": "library", "bom-ref": "pkg:npm/unplugin-unused@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/unplugin-unused/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unplugin-unused/package.json" } ], "concludedValue": "node_modules/unplugin-unused/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "6.0.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@6.0.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "ImportedModules", "value": "typescript" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ], "occurrences": [ { "location": "dist/tsdown/load-tsc-BKULZsrs-Bha6Vsu1.js", "line": 10 } ] } }, { "authors": [ { "name": "Hiroki Osame " } ], "group": "", "name": "tsx", "version": "4.23.1", "description": "TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsx@4.23.1", "externalReferences": [ { "type": "website", "url": "https://tsx.hirok.io" } ], "type": "library", "bom-ref": "pkg:npm/tsx@4.23.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsx/package.json" }, { "name": "ImportedModules", "value": "tsx/cjs/api" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsx/package.json" } ], "concludedValue": "node_modules/tsx/package.json" } ], "occurrences": [ { "location": "dist/tsdown/src-CPDzmpAq.js", "line": 371 }, { "location": "dist/vite/node/chunks/node.js", "line": 27040 } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.22.14", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.22.14", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.22.14", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Peteris Krumins (http://www.catonmat.net)" } ], "group": "", "name": "tree-kill", "version": "1.2.2", "description": "kill trees of processes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tree-kill@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pkrumins/node-tree-kill" }, { "type": "vcs", "url": "git://github.com/pkrumins/node-tree-kill.git" } ], "type": "library", "bom-ref": "pkg:npm/tree-kill@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tree-kill/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tree-kill/package.json" } ], "concludedValue": "node_modules/tree-kill/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" }, { "name": "ImportedModules", "value": "tinyglobby,glob,tinyglobby/glob" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/tinyglobby/package.json" } ], "occurrences": [ { "location": "build.ts", "line": 17 }, { "location": "build.ts", "line": 281 }, { "location": "build.ts", "line": 302 }, { "location": "build.ts", "line": 544 }, { "location": "build.ts", "line": 547 }, { "location": "build.ts", "line": 668 }, { "location": "build.ts", "line": 750 }, { "location": "build.ts", "line": 805 } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "terser", "version": "5.49.0", "description": "JavaScript parser, mangler/compressor and beautifier toolkit for ES6+", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/terser@5.49.0", "externalReferences": [ { "type": "website", "url": "https://terser.org" } ], "type": "library", "bom-ref": "pkg:npm/terser@5.49.0", "properties": [ { "name": "SrcFile", "value": "node_modules/terser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser/package.json" } ], "concludedValue": "node_modules/terser/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "sugarss", "version": "5.0.1", "description": "Indent-based CSS syntax for PostCSS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sugarss@5.0.1", "type": "library", "bom-ref": "pkg:npm/sugarss@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sugarss/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sugarss/package.json" } ], "concludedValue": "node_modules/sugarss/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "stylus", "version": "0.64.0", "description": "Robust, expressive, and feature-rich CSS superset", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stylus@0.64.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stylus/stylus" }, { "type": "vcs", "url": "git://github.com/stylus/stylus.git" } ], "type": "library", "bom-ref": "pkg:npm/stylus@0.64.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stylus/package.json" }, { "name": "ImportedModules", "value": "stylus" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stylus/package.json" } ], "concludedValue": "node_modules/stylus/package.json" } ], "occurrences": [ { "location": "dist/tsdown/tsdown-css.js", "line": 390 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Google Inc." } ], "group": "", "name": "sass-embedded", "version": "1.100.0", "description": "Node.js library that communicates with Embedded Dart Sass using the Embedded Sass protocol", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sass-embedded@1.100.0", "type": "library", "bom-ref": "pkg:npm/sass-embedded@1.100.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sass-embedded/package.json" }, { "name": "ImportedModules", "value": "sass-embedded" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sass-embedded/package.json" } ], "concludedValue": "node_modules/sass-embedded/package.json" } ], "occurrences": [ { "location": "dist/tsdown/tsdown-css.js", "line": 328 } ] } }, { "authors": [ { "name": "Natalie Weizenbaum (https://github.com/nex3)" } ], "group": "", "name": "sass", "version": "1.101.0", "description": "A pure JavaScript implementation of Sass.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sass@1.101.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sass/dart-sass" }, { "type": "vcs", "url": "https://github.com/sass/dart-sass" } ], "type": "library", "bom-ref": "pkg:npm/sass@1.101.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sass/package.json" }, { "name": "ImportedModules", "value": "sass" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sass/package.json" } ], "concludedValue": "node_modules/sass/package.json" } ], "occurrences": [ { "location": "dist/tsdown/tsdown-css.js", "line": 332 } ] } }, { "authors": [ { "name": "Mickael Jeanroy " } ], "group": "", "name": "rollup-plugin-license", "version": "3.7.1", "description": "Rollup plugin to add license banner to the final bundle and output third party licenses", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rollup-plugin-license@3.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mjeanroy/rollup-plugin-license" }, { "type": "vcs", "url": "https://github.com/mjeanroy/rollup-plugin-license" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-license@3.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup-plugin-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup-plugin-license/package.json" } ], "concludedValue": "node_modules/rollup-plugin-license/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "rollup", "version": "4.60.4", "description": "Next-generation ES module bundler", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rollup@4.60.4", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" }, { "type": "vcs", "url": "git+https://github.com/rollup/rollup.git" } ], "type": "library", "bom-ref": "pkg:npm/rollup@4.60.4", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup/package.json" } ], "concludedValue": "node_modules/rollup/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "rolldown-plugin-dts", "version": "0.27.13", "description": "A Rolldown plugin to generate and bundle dts files.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rolldown-plugin-dts@0.27.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sxzz/rolldown-plugin-dts#readme" }, { "type": "vcs", "url": "git+https://github.com/sxzz/rolldown-plugin-dts.git" } ], "type": "library", "bom-ref": "pkg:npm/rolldown-plugin-dts@0.27.13", "properties": [ { "name": "SrcFile", "value": "node_modules/rolldown-plugin-dts/package.json" }, { "name": "ImportedModules", "value": "rolldown-plugin-dts,rolldown-plugin-dts/dts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rolldown-plugin-dts/package.json" } ], "concludedValue": "node_modules/rolldown-plugin-dts/package.json" } ], "occurrences": [ { "location": "build.ts", "line": 16 }, { "location": "build.ts", "line": 485 } ] }, "tags": [ "bundle" ] }, { "group": "", "name": "rolldown", "version": "1.2.0", "description": "Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rolldown@1.2.0", "externalReferences": [ { "type": "website", "url": "https://rolldown.rs/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/rolldown.git" } ], "type": "library", "bom-ref": "pkg:npm/rolldown@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/rolldown/package.json" }, { "name": "ImportedModules", "value": "rolldown,build,rolldown/build,Plugin,rolldown/Plugin,BuildOptions,rolldown/BuildOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rolldown/package.json" } ], "concludedValue": "node_modules/rolldown/package.json" } ], "occurrences": [ { "location": "build-support/build-cjs-deps.ts", "line": 4 }, { "location": "build-support/build-cjs-deps.ts", "line": 23 }, { "location": "build-support/rewrite-imports.ts", "line": 1 }, { "location": "build.ts", "line": 15 }, { "location": "build.ts", "line": 271 }, { "location": "build.ts", "line": 438 }, { "location": "build.ts", "line": 474 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Bjorn Lu" } ], "group": "", "name": "publint", "version": "0.3.21", "description": "Lint packaging errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/publint@0.3.21", "externalReferences": [ { "type": "website", "url": "https://publint.dev" }, { "type": "vcs", "url": "git+https://github.com/publint/publint.git" } ], "type": "library", "bom-ref": "pkg:npm/publint@0.3.21", "properties": [ { "name": "SrcFile", "value": "node_modules/publint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/publint/package.json" } ], "concludedValue": "node_modules/publint/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "postcss", "version": "8.5.20", "description": "Tool for transforming styles with JS plugins", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss@8.5.20", "externalReferences": [ { "type": "website", "url": "https://postcss.org/" } ], "type": "library", "bom-ref": "pkg:npm/postcss@8.5.20", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/package.json" }, { "name": "ImportedModules", "value": "postcss" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/package.json" } ], "concludedValue": "node_modules/postcss/package.json" } ], "occurrences": [ { "location": "dist/vite/node/chunks/node.js", "line": 28334 } ] } }, { "group": "", "name": "pkg-types", "version": "2.3.0", "description": "Node.js utilities and TypeScript definitions for `package.json` and `tsconfig.json`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-types@2.3.0", "type": "library", "bom-ref": "pkg:npm/pkg-types@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-types/package.json" } ], "concludedValue": "node_modules/pkg-types/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.5", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "authors": [ { "name": "Boshen and oxc contributors" } ], "group": "", "name": "oxfmt", "version": "0.60.0", "description": "Formatter for the JavaScript Oxidation Compiler", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oxfmt@0.60.0", "externalReferences": [ { "type": "website", "url": "https://oxc.rs/docs/guide/usage/formatter" }, { "type": "vcs", "url": "git+https://github.com/oxc-project/oxc" } ], "type": "library", "bom-ref": "pkg:npm/oxfmt@0.60.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oxfmt/package.json" }, { "name": "ImportedModules", "value": "oxfmt,format,oxfmt/format" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oxfmt/package.json" } ], "concludedValue": "node_modules/oxfmt/package.json" } ], "occurrences": [ { "location": "build.ts", "line": 8 }, { "location": "build.ts", "line": 864 } ] } }, { "authors": [ { "name": "Boshen and oxc contributors" } ], "group": "", "name": "oxc-parser", "version": "0.141.0", "description": "Oxc Parser Node API", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oxc-parser@0.141.0", "externalReferences": [ { "type": "website", "url": "https://oxc.rs/docs/guide/usage/parser" }, { "type": "vcs", "url": "git+https://github.com/oxc-project/oxc.git" } ], "type": "library", "bom-ref": "pkg:npm/oxc-parser@0.141.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oxc-parser/package.json" }, { "name": "ImportedModules", "value": "oxc-parser,parse,oxc-parser/parse,ParseResult,oxc-parser/ParseResult,Visitor,oxc-parser/Visitor,CallExpression,oxc-parser/CallExpression,Expression,oxc-parser/Expression,StaticMemberExpression,oxc-parser/StaticMemberExpression,VariableDeclarator,oxc-parser/VariableDeclarator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oxc-parser/package.json" } ], "concludedValue": "node_modules/oxc-parser/package.json" } ], "occurrences": [ { "location": "build-support/find-create-require.ts", "line": 11 }, { "location": "build-support/find-create-require.ts", "line": 49 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.30.21", "description": "Modify strings, generate sourcemaps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magic-string@0.30.21", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Rich-Harris/magic-string.git" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.21", "properties": [ { "name": "SrcFile", "value": "node_modules/magic-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magic-string/package.json" } ], "concludedValue": "node_modules/magic-string/package.json" } ] } }, { "group": "", "name": "lightningcss", "version": "1.33.0", "description": "A CSS parser, transformer, and minifier written in Rust", "scope": "required", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lightningcss@1.33.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/parcel-bundler/lightningcss.git" } ], "type": "library", "bom-ref": "pkg:npm/lightningcss@1.33.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lightningcss/package.json" }, { "name": "ImportedModules", "value": "lightningcss" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lightningcss/package.json" } ], "concludedValue": "node_modules/lightningcss/package.json" } ], "occurrences": [ { "location": "dist/tsdown/tsdown-css.js", "line": 401 }, { "location": "dist/tsdown/tsdown-css.js", "line": 421 }, { "location": "dist/vite/node/chunks/node.js", "line": 29027 } ] } }, { "authors": [ { "name": "Alexis Sellier " } ], "group": "", "name": "less", "version": "4.4.2", "description": "Leaner CSS", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/less@4.4.2", "externalReferences": [ { "type": "website", "url": "http://lesscss.org" }, { "type": "vcs", "url": "https://github.com/less/less.js.git" } ], "type": "library", "bom-ref": "pkg:npm/less@4.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/less/package.json" }, { "name": "ImportedModules", "value": "less" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/less/package.json" } ], "concludedValue": "node_modules/less/package.json" } ], "occurrences": [ { "location": "dist/tsdown/tsdown-css.js", "line": 359 } ] } }, { "group": "", "name": "jiti", "version": "2.7.0", "description": "Runtime typescript and ESM support for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jiti@2.7.0", "type": "library", "bom-ref": "pkg:npm/jiti@2.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jiti/package.json" }, { "name": "ImportedModules", "value": "jiti" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jiti/package.json" } ], "concludedValue": "node_modules/jiti/package.json" } ], "occurrences": [ { "location": "dist/tsdown/src-CPDzmpAq.js", "line": 380 }, { "location": "dist/vite/node/chunks/node.js", "line": 27049 } ] } }, { "group": "", "name": "hookable", "version": "6.1.1", "description": "Awaitable hook system", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hookable@6.1.1", "type": "library", "bom-ref": "pkg:npm/hookable@6.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/hookable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hookable/package.json" } ], "concludedValue": "node_modules/hookable/package.json" } ] } }, { "group": "", "name": "esbuild", "version": "0.28.1", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild@0.28.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/esbuild@0.28.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" }, { "name": "ImportedModules", "value": "esbuild" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ], "occurrences": [ { "location": "dist/vite/node/chunks/node.js", "line": 5163 }, { "location": "dist/vite/node/chunks/node.js", "line": 29026 } ] } }, { "authors": [ { "name": "Guy Bedford" } ], "group": "", "name": "es-module-lexer", "version": "1.7.0", "description": "Lexes ES modules returning their import/export metadata", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-module-lexer@1.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/guybedford/es-module-lexer#readme" }, { "type": "vcs", "url": "git+https://github.com/guybedford/es-module-lexer.git" } ], "type": "library", "bom-ref": "pkg:npm/es-module-lexer@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-module-lexer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-module-lexer/package.json" } ], "concludedValue": "node_modules/es-module-lexer/package.json" } ] } }, { "authors": [ { "name": "VoidZero Inc." } ], "group": "@vitejs", "name": "devtools", "version": "0.4.5", "description": "Vite DevTools", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitejs/devtools@0.4.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitejs/devtools#readme" }, { "type": "vcs", "url": "git+https://github.com/vitejs/devtools.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitejs/devtools@0.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitejs/devtools/package.json" }, { "name": "ImportedModules", "value": "@vitejs/devtools/integration,@vitejs/devtools/config" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitejs/devtools/package.json" } ], "concludedValue": "node_modules/@vitejs/devtools/package.json" } ], "occurrences": [ { "location": "dist/vite/node/chunks/node.js", "line": 35457 }, { "location": "dist/vite/node/chunks/node.js", "line": 39117 }, { "location": "dist/vite/node/chunks/node.js", "line": 40974 } ] } }, { "group": "@types", "name": "node", "version": "24.13.3", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@24.13.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@24.13.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "@tsdown", "name": "exe", "version": "0.22.14", "description": "Cross-platform executable building for tsdown", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsdown/exe@0.22.14", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/@tsdown/exe@0.22.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@tsdown/exe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tsdown/exe/package.json" } ], "concludedValue": "node_modules/@tsdown/exe/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "@tsdown", "name": "css", "version": "0.22.14", "description": "Advanced CSS pipeline for tsdown powered by Lightning CSS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsdown/css@0.22.14", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/@tsdown/css@0.22.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@tsdown/css/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tsdown/css/package.json" } ], "concludedValue": "node_modules/@tsdown/css/package.json" } ] } }, { "authors": [ { "name": "Boshen and oxc contributors" } ], "group": "@oxc-project", "name": "types", "version": "0.141.0", "description": "Types for Oxc AST nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40oxc-project/types@0.141.0", "externalReferences": [ { "type": "website", "url": "https://oxc.rs" }, { "type": "vcs", "url": "git+https://github.com/oxc-project/oxc.git" } ], "type": "library", "bom-ref": "pkg:npm/@oxc-project/types@0.141.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@oxc-project/types/package.json" }, { "name": "ImportedModules", "value": "@oxc-project/types,Program,@oxc-project/types/Program" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@oxc-project/types/package.json" } ], "concludedValue": "node_modules/@oxc-project/types/package.json" } ], "occurrences": [ { "location": "dist/rolldown/parse-ast-index.d.mts", "line": 2 }, { "location": "dist/rolldown/shared/define-config-B-IDOhDz.d.mts", "line": 4 }, { "location": "dist/rolldown/utils-index.d.mts", "line": 3 }, { "location": "dist/rolldown/utils-index.d.mts", "line": 4 } ] } }, { "group": "@oxc-project", "name": "runtime", "version": "0.141.0", "description": "Oxc's modular runtime helpers", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40oxc-project/runtime@0.141.0", "externalReferences": [ { "type": "website", "url": "https://oxc.rs" }, { "type": "vcs", "url": "https://github.com/oxc-project/oxc.git" } ], "type": "library", "bom-ref": "pkg:npm/@oxc-project/runtime@0.141.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@oxc-project/runtime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@oxc-project/runtime/package.json" } ], "concludedValue": "node_modules/@oxc-project/runtime/package.json" } ] } }, { "group": "@oxc-node", "name": "core", "version": "0.1.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40oxc-node/core@0.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/oxc-project/oxc-node.git" } ], "type": "library", "bom-ref": "pkg:npm/@oxc-node/core@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@oxc-node/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@oxc-node/core/package.json" } ], "concludedValue": "node_modules/@oxc-node/core/package.json" } ] } }, { "group": "@oxc-node", "name": "cli", "version": "0.1.0", "description": "OXC Node cli", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40oxc-node/cli@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/oxc-project/oxc-node/tree/main/packages/cli" }, { "type": "vcs", "url": "git+https://github.com/oxc-project/oxc-node.git" } ], "type": "library", "bom-ref": "pkg:npm/@oxc-node/cli@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@oxc-node/cli/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@oxc-node/cli/package.json" } ], "concludedValue": "node_modules/@oxc-node/cli/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "types", "version": "7.29.7", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-types" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "parser", "version": "7.29.7", "description": "A JavaScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-parser" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "generator", "version": "7.29.7", "description": "Turns an AST into code.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/generator@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-generator" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/generator@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/generator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/generator/package.json" } ], "concludedValue": "node_modules/@babel/generator/package.json" } ] } }, { "group": "@ast-grep", "name": "napi", "version": "0.43.0", "description": "Search and Rewrite code at large scale using precise AST pattern", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40ast-grep/napi@0.43.0", "externalReferences": [ { "type": "vcs", "url": "https://ast-grep.github.io" } ], "type": "library", "bom-ref": "pkg:npm/@ast-grep/napi@0.43.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@ast-grep/napi/package.json" }, { "name": "ImportedModules", "value": "@ast-grep/napi,Lang,@ast-grep/napi/Lang,parse,@ast-grep/napi/parse,Edit,@ast-grep/napi/Edit,SgNode,@ast-grep/napi/SgNode" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@ast-grep/napi/package.json" } ], "concludedValue": "node_modules/@ast-grep/napi/package.json" } ], "occurrences": [ { "location": "build-support/rewrite-module-specifiers.ts", "line": 1 }, { "location": "build-support/rewrite-module-specifiers.ts", "line": 125 } ] } }, { "authors": [ { "name": "Andrew Branch" } ], "group": "@arethetypeswrong", "name": "core", "version": "0.18.2", "description": "The API behind arethetypeswrong.github.io", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arethetypeswrong/core@0.18.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arethetypeswrong/arethetypeswrong.github.io.git" } ], "type": "library", "bom-ref": "pkg:npm/@arethetypeswrong/core@0.18.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@arethetypeswrong/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arethetypeswrong/core/package.json" } ], "concludedValue": "node_modules/@arethetypeswrong/core/package.json" } ] }, "tags": [ "api" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@voidzero-dev/vite-plus-core@0.2.7-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-11T15:08:31Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, November 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'vite-plus-core' with version '0.2.7-tuxcare.1'. The package type in this SBOM is npm with 9 purl namespaces described under components. The components were identified from 48 source files." } ] }