{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:12fe08b9-ccdb-4c4e-b2f1-041c48ac044c", "version": 1, "metadata": { "timestamp": "2026-11-10T22:57:49Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "harness-opencode-bridge", "group": "", "version": "0.0.0", "purl": "pkg:npm/harness-opencode-bridge@0.0.0", "bom-ref": "pkg:npm/harness-opencode-bridge@0.0.0", "properties": [], "type": "application" }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@hono\\n@modelcontextprotocol\\n@opencode-ai\\n@vscode" }, { "name": "cdx:bom:componentSrcFiles", "value": "src/bridge/pnpm-lock.yaml" } ] }, "components": [ { "group": "@hono", "name": "node-server", "version": "2.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a7f287f4c9df35cb26dec47ac7894d826e63f9037812df2cacaade765f4365f5e2c99d54437690d9856914b6ea92d60de4923e0c1f9564528cd8fa84e612ca8d" } ], "purl": "pkg:npm/%40hono/node-server@2.1.6", "type": "library", "bom-ref": "pkg:npm/@hono/node-server@2.1.6", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@modelcontextprotocol", "name": "sdk", "version": "1.32.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "496b15b47ff4bd42d2412b6867ac711f62b4f4b8bc7d7613302eb865ea2009da59dd74a2d5e08f381c95d4ea6e271b88dce7261e1a2c0d66328a2d3bb693ec2f" } ], "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.32.2", "type": "library", "bom-ref": "pkg:npm/@modelcontextprotocol/sdk@1.32.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "ImportedModules", "value": "@modelcontextprotocol/sdk/server/mcp.js,McpServer,@modelcontextprotocol/sdk/server/mcp.js/McpServer,@modelcontextprotocol/sdk/server/stdio.js,StdioServerTransport,@modelcontextprotocol/sdk/server/stdio.js/StdioServerTransport" }, { "name": "cdx:mcp:package", "value": "true" }, { "name": "cdx:mcp:official", "value": "true" }, { "name": "cdx:mcp:role", "value": "sdk" }, { "name": "cdx:mcp:catalogSource", "value": "official-sdk" }, { "name": "cdx:mcp:packageName", "value": "@modelcontextprotocol/sdk" } ], "tags": [ "mcp", "mcp-sdk", "official-mcp-sdk", "trusted-source" ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ], "occurrences": [ { "location": "dist/bridge/host-tool-mcp.mjs", "line": 2 }, { "location": "src/bridge/host-tool-mcp.ts", "line": 7 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 3 }, { "location": "src/bridge/host-tool-mcp.ts", "line": 8 } ] } }, { "group": "@opencode-ai", "name": "sdk", "version": "1.19.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "f9baaef201e2c26abde93f6ae46df8b8b34758222720cb2b137872b423478f57156b18d8d00189c8d093d6b91e799c203d4ec0e5331337037ed17c423b6bea0e" } ], "purl": "pkg:npm/%40opencode-ai/sdk@1.19.5", "type": "library", "bom-ref": "pkg:npm/@opencode-ai/sdk@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "ImportedModules", "value": "@opencode-ai/sdk/v2,createOpencodeClient,@opencode-ai/sdk/v2/createOpencodeClient,createOpencodeServer,@opencode-ai/sdk/v2/createOpencodeServer,QuestionInfo,@opencode-ai/sdk/v2/QuestionInfo" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ], "occurrences": [ { "location": "dist/bridge/index.mjs", "line": 10 }, { "location": "dist/bridge/index.mjs", "line": 2151 }, { "location": "dist/bridge/index.mjs", "line": 2162 }, { "location": "src/bridge/index.ts", "line": 20 }, { "location": "src/bridge/index.ts", "line": 310 }, { "location": "src/bridge/index.ts", "line": 321 }, { "location": "src/bridge/question-tool.ts", "line": 5 } ] } }, { "group": "@vscode", "name": "ripgrep-darwin-arm64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "af792d1d2bdb172710345eac97bb0d0cfa1ca6c23b27e984ce1d48699164634b299b793667db7c84f01e38aefea7497aa7afecc24402d785d65f4d65a30fbde1" } ], "purl": "pkg:npm/%40vscode/ripgrep-darwin-arm64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-darwin-arm64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "darwin" }, { "name": "cdx:npm:cpu", "value": "arm64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-darwin-x64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "db96f88166cbd77f1d1ae414db8e1e6c228a734ab4e542c1328152cfda001141cd7aa2bf94e2558834bb0d1bdb0dacf303348475a9f7f7566792cfd1e6691a4d" } ], "purl": "pkg:npm/%40vscode/ripgrep-darwin-x64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-darwin-x64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "darwin" }, { "name": "cdx:npm:cpu", "value": "x64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-arm64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "950ff9cd31bef94d04dc8855812e043d34e7fd4e2892771a44c33918e15f398672c12e27b83df51a19076cd6250e4e42b830baf3e858274fde41ec822890c0fa" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-arm64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-arm64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "arm64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-arm", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "18302fb9f3431eef33a8b1265ecb5a9501745a1eb042f76c062fd5837622dc22b86bc5e8157aaa5d5107119f71433dedd0d7e848473d25bbcaf430d2e85c72c5" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-arm@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-arm@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "arm" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-ia32", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6162e4494b45778261e447a922103d44949fbf7b8c015328fb6ac12061cf067be02eb65c888b3670329e8b5fe9e9673f682cd4a07c8c020d91eadc3864204a1a" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-ia32@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-ia32@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "ia32" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-ppc64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "aae5d563c7f043c3bf96f535cab4aa4a5de3954cf2b1149bf807d47c22ffb51b69871b0a945bcf01e8ebc99eaf838060be7f172fbe316f8a8c083996818ad3e7" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-ppc64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-ppc64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "ppc64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-riscv64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "7f9901401ad67d0b7c43b3a148e46e3437a2e5d9186a0063df2e232264945c6332f01fca7bb4a5b5245c52d8cfbf5eba14015f1c20265ae669dfe7169d7dbf57" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-riscv64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-riscv64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "riscv64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-s390x", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "ad339c245186725d9cd3b454396528e14d677677a62a163a03d867301d7cba4ee34a025cd1dfd02c1196316a6e99db6826da62ce7ff022fe665c88ac26e92eb1" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-s390x@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-s390x@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "s390x" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-linux-x64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "990ddb56b5299c3dafb3b413d2f5fdd0bb7472752ae3aeee16d124b4876c249996dbde91a1250b446a968331b500ac720693430fa97864ee2a29fe928320b6dd" } ], "purl": "pkg:npm/%40vscode/ripgrep-linux-x64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-linux-x64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "x64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-win32-arm64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "bdf4c88ead4e1e7cd48f165c1d540031b9e0829f1da467fed102853991f058fa85c17c500bc78258cfb935476827acab12509e333a144d7a0afcb7596a7881f9" } ], "purl": "pkg:npm/%40vscode/ripgrep-win32-arm64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-win32-arm64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "win32" }, { "name": "cdx:npm:cpu", "value": "arm64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-win32-ia32", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "fffadf004f813b0e400b610c99ea66884dfa8d4b9ebed418350aaa970d6cde6f45951c63c44badf7b46444f1c0bbd046e264a88dab59c7e91765735dc88f5c69" } ], "purl": "pkg:npm/%40vscode/ripgrep-win32-ia32@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-win32-ia32@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "win32" }, { "name": "cdx:npm:cpu", "value": "ia32" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep-win32-x64", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "28d3efb4496576a20b1dd9c07adba33daa3090d6e9a89cb7b2c20618de85e8abdef508be9cd2c8d83374d4ef372630845506c2ce5f0ebf7419f44a2fdc147c0e" } ], "purl": "pkg:npm/%40vscode/ripgrep-win32-x64@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep-win32-x64@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "win32" }, { "name": "cdx:npm:cpu", "value": "x64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "@vscode", "name": "ripgrep", "version": "1.18.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "9ece6559ee38b527db4cc6d552cc81f88d7cd7d3d54b0e0076980ad11364cdf59fc32ebedc850d4b1c12adf4e7a35fe859a4bf84444dcfe5cb595ca06b668905" } ], "purl": "pkg:npm/%40vscode/ripgrep@1.18.0", "type": "library", "bom-ref": "pkg:npm/@vscode/ripgrep@1.18.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "ImportedModules", "value": "@vscode/ripgrep,rgPath,@vscode/ripgrep/rgPath" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ], "occurrences": [ { "location": "dist/bridge/index.mjs", "line": 11 }, { "location": "src/bridge/opencode-path.ts", "line": 2 } ] } }, { "group": "", "name": "accepts", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e5cbe0e82b4ac1f81d995a98d562225ca7374356e446a18b8bed96ffa6a8fba63b82efd10b046e021184ce1e41e0a96ccd2b932e0658baa16aa396c89a334a9e" } ], "purl": "pkg:npm/accepts@2.0.0", "type": "library", "bom-ref": "pkg:npm/accepts@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ajv-formats", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f2252a979d04511fae51c7514371c3a9ae84572a3776870bf20e5627714d7169aeeb621b90652e7bfa44c8b056f1518a2ae7133e0a9e92ce1f214d43038ca8c1" } ], "purl": "pkg:npm/ajv-formats@3.0.1", "type": "library", "bom-ref": "pkg:npm/ajv-formats@3.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ajv", "version": "8.20.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4e16e58be3a53a3fa230f60505505f2773a60809da4b2367e0cd6fcfd4fa1a46b926df5b6bf1c8479ea3a32eb9b58ea4c7f142179557341f35f58eff194ac118" } ], "purl": "pkg:npm/ajv@8.20.0", "type": "library", "bom-ref": "pkg:npm/ajv@8.20.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "body-parser", "version": "2.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "21f93529c2ebc5a1add6871c41a81034534d3aa46dd4b16e7a11271c7cc1f19e9c460231454d5305a888b14882740fa0cb93cbed8d485f7d4334a9119b1b578d" } ], "purl": "pkg:npm/body-parser@2.4.0", "type": "library", "bom-ref": "pkg:npm/body-parser@2.4.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "bytes", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12" } ], "purl": "pkg:npm/bytes@3.1.2", "type": "library", "bom-ref": "pkg:npm/bytes@3.1.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "call-bind-apply-helpers", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4a9d5a6e52748af0e44b38dc68977112e9cde7f5ef92c149dac30115fabac74af285057fd9bfcac057b6d5c329987b4f3928a3f0af7dff049fa04b9339b9ae31" } ], "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "type": "library", "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "call-bound", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fb2b3df7b53dea9a382b1fc0069042aa103d12ec49690583420ef6f791f8841a61bf72198346e804abb0629b78617a7a319e4099942753fb72313951a5a49e8e" } ], "purl": "pkg:npm/call-bound@1.0.4", "type": "library", "bom-ref": "pkg:npm/call-bound@1.0.4", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "content-disposition", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7be1f46571d2598ac4361433c352cfb8fe2817933354a98353a77787196f68f1182cb83ad8cc6d40d3d1c784984ae6094815209d0206e0720ddad12d36fec3a2" } ], "purl": "pkg:npm/content-disposition@2.0.1", "type": "library", "bom-ref": "pkg:npm/content-disposition@2.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "content-type", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9d38ea7dc045122a4a7570afe180d05827e670b64a9bcd65745d29028a53bf2ac51956dc47a3ff54001de46ecdfb4b53afc42a894d2d15a743e852b836d27038" } ], "purl": "pkg:npm/content-type@1.0.5", "type": "library", "bom-ref": "pkg:npm/content-type@1.0.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "content-type", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a3ed43d71348daa9a3acba435945411f122d8070bec2fefc26c1c1d5d0ef7b78ed44d69c4166eca3959af1e6c79368d060d54ebea37e70a5adf941f71cfbb6a" } ], "purl": "pkg:npm/content-type@2.1.0", "type": "library", "bom-ref": "pkg:npm/content-type@2.1.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "cookie-signature", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0fbeae53bdee9525eb0f5517178284d93331555c21b270a07c0c9383d93c3fa2866639572ab38b7b874940a2370718b9c237ac6681572561253560633d931b86" } ], "purl": "pkg:npm/cookie-signature@1.2.2", "type": "library", "bom-ref": "pkg:npm/cookie-signature@1.2.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "cookie", "version": "0.7.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ca48b95e72ae7fbe74979d2e193965b7a90a20b6389d0d5e34841ab685c40726797568272aa6e7aa64eb044e41e0dee5acc24a436cad58c8933b6a34bfa130ff" } ], "purl": "pkg:npm/cookie@0.7.2", "type": "library", "bom-ref": "pkg:npm/cookie@0.7.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "cors", "version": "2.8.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b49b590411c0eaf8c801a17a12721aaba95a0413fd6aafd8de8b9526311fa076d105c1c100761c321ff0f0b0eb9363ef20c32af209a8a5ae43e15f1199baf11b" } ], "purl": "pkg:npm/cors@2.8.6", "type": "library", "bom-ref": "pkg:npm/cors@2.8.6", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "cross-spawn", "version": "7.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc" } ], "purl": "pkg:npm/cross-spawn@7.0.6", "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "debug", "version": "4.4.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8" } ], "purl": "pkg:npm/debug@4.4.3", "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "depd", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af" } ], "purl": "pkg:npm/depd@2.0.0", "type": "library", "bom-ref": "pkg:npm/depd@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "dunder-proto", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "28837f9c3241411717c3430b561644f62407986ebca80548060f42aa65188e64088608a3f54e4c16faea9142f915bb72cb366e39e3add3375e45ee1463b72df8" } ], "purl": "pkg:npm/dunder-proto@1.0.1", "type": "library", "bom-ref": "pkg:npm/dunder-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ee-first", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3" } ], "purl": "pkg:npm/ee-first@1.1.1", "type": "library", "bom-ref": "pkg:npm/ee-first@1.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "encodeurl", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "12ffe123278f2d9b692fdf31e7ada5bcfb5e9eb51f1abd257da7f8e07159fa10c4c2ca3b71c57d40066b1152e0d21c4d033ca0680171cb675868028a3341b4e8" } ], "purl": "pkg:npm/encodeurl@2.0.1", "type": "library", "bom-ref": "pkg:npm/encodeurl@2.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "es-define-property", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7b79d17e07d4678acd18bdb7da05205f4e90372c9ecf4e0a76316b17e2d34683979ab3a014a0e0e0109db235bc1274faf5ea9d606991a49c223d560dac2696de" } ], "purl": "pkg:npm/es-define-property@1.0.1", "type": "library", "bom-ref": "pkg:npm/es-define-property@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "es-errors", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3" } ], "purl": "pkg:npm/es-errors@1.3.0", "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "es-object-atoms", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1d6701a0de8d8a57aab52c9d2b616a1db4bf2e80ddda9aab9d01cbc89cc18f890ea7f932d8c58c37af78c4e7e42bcfd29d4b16d831fb11fc9597274a0ac9b567" } ], "purl": "pkg:npm/es-object-atoms@1.1.2", "type": "library", "bom-ref": "pkg:npm/es-object-atoms@1.1.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "escape-html", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3" } ], "purl": "pkg:npm/escape-html@1.0.3", "type": "library", "bom-ref": "pkg:npm/escape-html@1.0.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "etag", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e" } ], "purl": "pkg:npm/etag@1.8.1", "type": "library", "bom-ref": "pkg:npm/etag@1.8.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "eventsource-parser", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "10a375bca00c719f0c95832968dbb137a47dc9a9331fab9a8c7707553a96273beee695b0f43ca16cfdf91c7f0c54143e7598c07c3c64f80f0d891f4a59a5e2c9" } ], "purl": "pkg:npm/eventsource-parser@3.1.1", "type": "library", "bom-ref": "pkg:npm/eventsource-parser@3.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "eventsource", "version": "3.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0914f5593cae4280fbef5196e7a5c464543f66849f5a27756a52860d832692ddb297c517ad5478a6ca6a58d11ca8abd523383a3c096d5a3c5c4923eb6e803888" } ], "purl": "pkg:npm/eventsource@3.0.7", "type": "library", "bom-ref": "pkg:npm/eventsource@3.0.7", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "express-rate-limit", "version": "8.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ccf2ea0c8d9fd205765a61a769c2dff57492aa7e1595d4723f92c2ccec31d01287e3498eebed8f0859284ac44eda378fc7ceff29fe8d505e8fd903932971db40" } ], "purl": "pkg:npm/express-rate-limit@8.7.3", "type": "framework", "bom-ref": "pkg:npm/express-rate-limit@8.7.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "express", "version": "5.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a82ab2d714a86ae831383e085476f5656764bc21765b7684da890aa2e5a3f15c09fb3b6c912897a019c2489a9f293f9c54f261b89a9ef582db638db9f99874d2" } ], "purl": "pkg:npm/express@5.3.0", "type": "framework", "bom-ref": "pkg:npm/express@5.3.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "fast-deep-equal", "version": "3.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" } ], "purl": "pkg:npm/fast-deep-equal@3.1.3", "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@3.1.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "fast-uri", "version": "3.1.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "852ff45addd86b4e37a0a5ecd2c231acca4a4084d784c2c8ad500a2978b8828cc60bdbfb6115959d7219ce334f4ced3633d05dc4b096a8ad7245780dce257225" } ], "purl": "pkg:npm/fast-uri@3.1.9", "type": "library", "bom-ref": "pkg:npm/fast-uri@3.1.9", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "finalhandler", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4bc2a866045937e6b9acdc2a4f195965e3e34ffe1c9e6d11395ef42de7511d9d29f2ef5f4480f484951942990a2f3ae8f0b7e60bcb31db76d8ead54dc6ff2940" } ], "purl": "pkg:npm/finalhandler@2.1.1", "type": "library", "bom-ref": "pkg:npm/finalhandler@2.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "forwarded", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3" } ], "purl": "pkg:npm/forwarded@0.2.0", "type": "library", "bom-ref": "pkg:npm/forwarded@0.2.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "fresh", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "471fd6c9c67ad0739aa8b2808ba70744a288ef3c566c9df53219ed9adc0ca1a4de17b5c51fd861069f2f21368c89d7e58d143a7985822a46932beca45491cfd8" } ], "purl": "pkg:npm/fresh@2.0.0", "type": "library", "bom-ref": "pkg:npm/fresh@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "function-bind", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648" } ], "purl": "pkg:npm/function-bind@1.1.2", "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "get-intrinsic", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f5f4a349aa2cfdf448548a7ec5226513a95fc21112ecb36d29a08121a987b23af69dad418800493e8d263a38f3f062435116ab9823c6a9a89583999f8dbf7c09" } ], "purl": "pkg:npm/get-intrinsic@1.3.0", "type": "library", "bom-ref": "pkg:npm/get-intrinsic@1.3.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "get-proto", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b1349f063a17069f3d26f20a21e7eac3b53608279bb1cef892263a6b0886a202ada1219b823604fc6ffe97db05dcc5853cd73d21ca0e0b83837ca1dfc459a9d2" } ], "purl": "pkg:npm/get-proto@1.0.1", "type": "library", "bom-ref": "pkg:npm/get-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "gopd", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "65429187afe4505a0089302d4d83d9277870f70371c7e04804e8a39e51bd3e7ac9b027128ecd70cb20fabc9a5a62d827cc3aca6114aa7f738ee917daf77c6c46" } ], "purl": "pkg:npm/gopd@1.2.0", "type": "library", "bom-ref": "pkg:npm/gopd@1.2.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "has-symbols", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d5c0cd77027625aa2199bdec8383a629a301c2e0b8f2c6278b91d4c360efb02f0b8c64cb2bd87e79bd57e91cae3877b8853d142c25baf22a26863528294aa53d" } ], "purl": "pkg:npm/has-symbols@1.1.0", "type": "library", "bom-ref": "pkg:npm/has-symbols@1.1.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "hasown", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4f651b7db044177db089ea5722c3254d6f7e743602eb0321fedfef600e2db8e30aa96cff9f7bebd4d152c508b23fece4da65eca0c03f8bfeea57a2cabadd6dd4" } ], "purl": "pkg:npm/hasown@2.0.4", "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "hono", "version": "4.13.16", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "00e2ce121beb57e887f76c570a716bff9fb72a33ca708df13fadd726d5f9b290279339cf7478a3948b144e98bbffd1215aaad309e930e5ce738752be62c570ec" } ], "purl": "pkg:npm/hono@4.13.16", "type": "library", "bom-ref": "pkg:npm/hono@4.13.16", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "http-errors", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e056d17405fe6d2766a3801416e4b458d88fcfc36016dfabf138603569a5ae3423b7543b651f7ecd395c7b6f39f71e0a497af022c69e4ea0e82909ad3fca4b99" } ], "purl": "pkg:npm/http-errors@2.0.1", "type": "library", "bom-ref": "pkg:npm/http-errors@2.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "iconv-lite", "version": "0.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "20a5e9bc8ce39c2f574c051b54170c7c64b410f6885ed5babfecebf91469fa1a942c4a68d28c196b1eb0c91c0f3896d66f38d8b29430bac4ec7d5af489f878b9" } ], "purl": "pkg:npm/iconv-lite@0.7.3", "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.7.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ip-address", "version": "10.7.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d342d890ce9bc882daf5e408c7aaa869708ce34c532dde7a019e2fc9a3d6dd84f26f8f556583e8e71b2202ae2db90e78187e11ee055d612709d41ec1efb3ee4e" } ], "purl": "pkg:npm/ip-address@10.7.6", "type": "library", "bom-ref": "pkg:npm/ip-address@10.7.6", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ipaddr.js", "version": "1.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede" } ], "purl": "pkg:npm/ipaddr.js@1.9.1", "type": "library", "bom-ref": "pkg:npm/ipaddr.js@1.9.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "is-promise", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "86fa6823a928ae124c9de8f6f3975283a9eed7e7babb1b3bcc6dc16009b96f2a83b2024d5b0c7333acfa8998808104784c9df42660533b0a99530dd69721f701" } ], "purl": "pkg:npm/is-promise@4.0.0", "type": "library", "bom-ref": "pkg:npm/is-promise@4.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "isexe", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23" } ], "purl": "pkg:npm/isexe@2.0.0", "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "jose", "version": "6.2.15", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a9d17a7b0719011b5e7faddf27d00a2993e0c70faded4487e872d761c0f80ab7664af0e9efdae92523c510a73dd1005e192eb7bb5290b4dd8c6501c2d320c8cc" } ], "purl": "pkg:npm/jose@6.2.15", "type": "library", "bom-ref": "pkg:npm/jose@6.2.15", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] }, "tags": [ "security" ] }, { "group": "", "name": "json-schema-traverse", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" } ], "purl": "pkg:npm/json-schema-traverse@1.0.0", "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@1.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "json-schema-typed", "version": "8.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7d08685dd72f737576f31ec2ec132ce0fe7e90d96051445eda39944f54fffe8051303aeacb540f7a52629b0646a3b1e0f553d5dc4415e419eae216c5cb6bdeb4" } ], "purl": "pkg:npm/json-schema-typed@8.0.2", "type": "library", "bom-ref": "pkg:npm/json-schema-typed@8.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "math-intrinsics", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6" } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "media-typer", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cb3df145a1b6d1cebf04ecef6280da1ad3e61ac72ced88af22d64412a7ba19bc0d7c7bb1bbd60d9af9c490ccca95d006638ffcd2945c41165212786aba4f57b9" } ], "purl": "pkg:npm/media-typer@1.1.1", "type": "library", "bom-ref": "pkg:npm/media-typer@1.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "merge-descriptors", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4a7937d785796b214b869ddf914444b9be96b6305f3dd08f6352e7f3ff26ba7b8bba2621b000600555aca33006f8c58c6d512f71d7296e2f51ef0c36da5f50de" } ], "purl": "pkg:npm/merge-descriptors@2.0.0", "type": "library", "bom-ref": "pkg:npm/merge-descriptors@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "mime-db", "version": "1.54.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "694e4426e20dd960de982700a76bc505fa7f9b810085626750d492c348b1b3bfe45db77a3e0eb8126c0990d745841f1a5add6c1f60935eb2f1a3f880195de83d" } ], "purl": "pkg:npm/mime-db@1.54.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.54.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "mime-types", "version": "3.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2db833764d21e23ba843d7c22975b86f2d1426a8fe9ce3ab23d309d6c4a3e2723c688d9ea35aa6bd01227b8543d6096c4b6e749f5e4bb16b18b42ba0892b52e4" } ], "purl": "pkg:npm/mime-types@3.0.2", "type": "library", "bom-ref": "pkg:npm/mime-types@3.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394" } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "negotiator", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "34c3c144c2608901e36ddf29846dd579b771e246751f5db5adb97922432a78eb1a869b41f412a8fddee8277cd35ea4e06a09f66d694d497921d10506337d5162" } ], "purl": "pkg:npm/negotiator@1.1.0", "type": "library", "bom-ref": "pkg:npm/negotiator@1.1.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "object-assign", "version": "4.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" } ], "purl": "pkg:npm/object-assign@4.1.1", "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "object-inspect", "version": "1.13.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5baee22e5e09d845c41936df78709f7eb8c37e2b6f2c0360d14957df01545124f1f762974457a0307515812a84fb0be101b8b85aa8c683d733cac4d5d84a5b7b" } ], "purl": "pkg:npm/object-inspect@1.13.4", "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "on-finished", "version": "2.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "013594bf7f3b8be9cb0f8f44883a0e7ede6c71fdf656c773de4b6b4091bd6e2ee344599a5d3b2cbf2be3d4499e295560bdeb1ba94b6f410bda4b64e94ee90065" } ], "purl": "pkg:npm/on-finished@2.4.2", "type": "library", "bom-ref": "pkg:npm/on-finished@2.4.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" } ], "purl": "pkg:npm/once@1.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-ai", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b44a8cbd06a17e17438fcbdc798a57b6822bbe33d79b95d17deb569cf3796084ae794eda74dc7d25c500df367ed862ae0d5803a467507b564bb426438eaa1dbc" } ], "purl": "pkg:npm/opencode-ai@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-ai@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:os", "value": "darwin, linux, win32" }, { "name": "cdx:npm:cpu", "value": "arm64, x64" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-darwin-arm64", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d0c6d26ca926c151ed80fdf5189cb21027ba415cb84fb5b85a9eecd93b265c74cf3f27f4d677b7756497f7b5fd76434adbc2dcea4b7eccc3d050fffd1a00cb66" } ], "purl": "pkg:npm/opencode-darwin-arm64@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-darwin-arm64@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "darwin" }, { "name": "cdx:npm:cpu", "value": "arm64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-darwin-x64-baseline", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "adfb6f0281c158f564bf004baf749059166f7088f23133744a584cce5b7e960be840104634499943feec4bf531d681ec255ffef940ee2d5b28e27e4bf79603e5" } ], "purl": "pkg:npm/opencode-darwin-x64-baseline@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-darwin-x64-baseline@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "darwin" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-darwin-x64", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f833bb20c3d30ab5f5d942579cbe292f772473047a051e9fead03d4089554399d9c7ae93e54ec544c253e27e6bb0e9c9c4b33fa59daf7d7d46f2fae7bd73bc14" } ], "purl": "pkg:npm/opencode-darwin-x64@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-darwin-x64@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "darwin" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-linux-arm64-musl", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "631be954f27f8de7af57ddc35518ae3956e1928240bb041469d3c31cf6b0eb9699900299e8e13b5f24b0092f918e5873b7b7cfaf28acbc03a352d664c1f301b9" } ], "purl": "pkg:npm/opencode-linux-arm64-musl@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-linux-arm64-musl@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "arm64" }, { "name": "cdx:npm:libc", "value": "musl" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-linux-arm64", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bb61c5448eafd6734c54a895df8027f17ac607125e67e442836b58bb74aa9463832aa2acaf946811b697d6d9ec7c66feac44e1f402555fd912f1d4995cfb9fb0" } ], "purl": "pkg:npm/opencode-linux-arm64@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-linux-arm64@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "arm64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-linux-x64-baseline-musl", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "930b7a8664da23a9ee8e3033740917bf78f6ac3cd734e31f324f097fc6f069c1edc1497c096036a6c0d58379d6c9be3307201ae85d634889661c23c706ad4afd" } ], "purl": "pkg:npm/opencode-linux-x64-baseline-musl@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-linux-x64-baseline-musl@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:libc", "value": "musl" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-linux-x64-baseline", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f6403eb2ddd75ed09730fc797f72ddd6ed7dba81d33b6bb606db7c6b672a849e0622a55b0f59972debe3dcb1c5126b6e42814693e52cb469e5dfcb02a978f9b1" } ], "purl": "pkg:npm/opencode-linux-x64-baseline@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-linux-x64-baseline@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-linux-x64-musl", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cba9d46c7dd589a8cddfb29a555cb4fca9d6bff8b8f01c7940fbfd525f4e349c9ad68b2c57b08755bf9934573ad4ce46aa556d8c2bd957b4f478132a8491bb9a" } ], "purl": "pkg:npm/opencode-linux-x64-musl@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-linux-x64-musl@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:libc", "value": "musl" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-linux-x64", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8b5aa1ed5a282c630bf715fab9df77cb4240f23ff568f7836112a3b26617ac95f54e32161e004132411b1093d9b61a566ec260fff5df06047a29befe34f68989" } ], "purl": "pkg:npm/opencode-linux-x64@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-linux-x64@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "linux" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-windows-arm64", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6b2485fcc0e38b928edc8e7297d11ce20f245bf408c78263e455f006187f16b0eed30e8bf0700e187edcca315bdedf135bba714641f7122deb7e458013b71273" } ], "purl": "pkg:npm/opencode-windows-arm64@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-windows-arm64@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "win32" }, { "name": "cdx:npm:cpu", "value": "arm64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-windows-x64-baseline", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c911cdf93b1f2e37cb99d4150155aa4c67c63f5caaf18b54172f49c37dd78653c8a7beec94174226b8f63c2e1a9ae125e8126d68840384315ba49f3e6b9cfb43" } ], "purl": "pkg:npm/opencode-windows-x64-baseline@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-windows-x64-baseline@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "win32" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "opencode-windows-x64", "version": "1.19.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c4255bac0f00fea41301d0482b284ae6dc77fe672ad7cc85f36322f2986bcb43096f6eb7d679e7a7117d9ba1457d60151f27abe2a146aceee16d65deb074351a" } ], "purl": "pkg:npm/opencode-windows-x64@1.19.5", "type": "library", "bom-ref": "pkg:npm/opencode-windows-x64@1.19.5", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:os", "value": "win32" }, { "name": "cdx:npm:cpu", "value": "x64" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "parseurl", "version": "1.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9" } ], "purl": "pkg:npm/parseurl@1.3.3", "type": "library", "bom-ref": "pkg:npm/parseurl@1.3.3", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "path-key", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9" } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "path-to-regexp", "version": "8.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a9172e21d3faf4d3e6e2a6c008af9a0e8808e42043322d6329ed2bcb9ad2409cfc2552ec0bb8d5f17a622631912cba25dcdf91e6284661cacf2d39e8ea901d04" } ], "purl": "pkg:npm/path-to-regexp@8.4.2", "type": "library", "bom-ref": "pkg:npm/path-to-regexp@8.4.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "pkce-challenge", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c10d1bfd6e05af4d6ab691e5a92aaca5c8f712106f8a6b1d8742a51e11fc1d166732c11ad1e6b67d350b397392f5c710af7a26f86706464e1efa2b2b65657ca9" } ], "purl": "pkg:npm/pkce-challenge@5.0.1", "type": "library", "bom-ref": "pkg:npm/pkce-challenge@5.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "proxy-addr", "version": "2.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e679f1d321b2554718eadf519d6700456b704fd1750fc3bdaedd3c86d3ef9dde3d5b522066d98b921bbd59f333423d5c1718c720ee9ca279d43555b993b015c9" } ], "purl": "pkg:npm/proxy-addr@2.0.8", "type": "library", "bom-ref": "pkg:npm/proxy-addr@2.0.8", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "qs", "version": "6.17.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8dddc23a468a5601945be647c841c21bd6c7ed1a1a6a25ae320cec2018d43158cb01a5865a9a14015c258d5bc11f146eff6a841e769d2c666b92eb585013d024" } ], "purl": "pkg:npm/qs@6.17.1", "type": "library", "bom-ref": "pkg:npm/qs@6.17.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "range-parser", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "85e9369854293ee2381350412ab4ada3e054ddedf1e31b9aaec6e2c2bdfe95fee9e388eebc5315d171564003f7c54caa5c0e11ad72c8a1a49419b4add39e9933" } ], "purl": "pkg:npm/range-parser@1.3.0", "type": "library", "bom-ref": "pkg:npm/range-parser@1.3.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "raw-body", "version": "3.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2b9cd08c3965c5691fed9e7125d574fc1d164cdab1eafc46ef4cc9138374901b382e8be6118589cd01b10bd6d2f5100abb76e0338d25adde73a0b275d8c43904" } ], "purl": "pkg:npm/raw-body@3.0.2", "type": "library", "bom-ref": "pkg:npm/raw-body@3.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "require-from-string", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" } ], "purl": "pkg:npm/require-from-string@2.0.2", "type": "library", "bom-ref": "pkg:npm/require-from-string@2.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "router", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9cb4eb50a9b653288beeb9616a9bbf665e3917036091919a0a965b2076a30d883094908eccb4a4f9c20f027b04a95f79e468c82c99ca6dd402d6754fcfe80061" } ], "purl": "pkg:npm/router@2.2.0", "type": "library", "bom-ref": "pkg:npm/router@2.2.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "safer-buffer", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6" } ], "purl": "pkg:npm/safer-buffer@2.1.2", "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "send", "version": "1.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d609d97fb0c572821c6a34e34f08f0b838f3bb3e0f3dc6364ad28f96c180435f981f6d08455ac169749699d8e8c1327abbc45cd353e860e1875df3f599871935" } ], "purl": "pkg:npm/send@1.2.1", "type": "library", "bom-ref": "pkg:npm/send@1.2.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "serve-static", "version": "2.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c515c19f4a4fa904d54220bcc3242b2acd8c3a55f6e334343ce19a8f492e96dbe8382b2d050339caf3a1015494c0e32342d4efb0f5a83421df3c6c1a6902614f" } ], "purl": "pkg:npm/serve-static@2.2.1", "type": "library", "bom-ref": "pkg:npm/serve-static@2.2.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "setprototypeof", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7" } ], "purl": "pkg:npm/setprototypeof@1.2.0", "type": "library", "bom-ref": "pkg:npm/setprototypeof@1.2.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "shebang-command", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c" } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "shebang-regex", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4" } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "side-channel-list", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a39ffd1b8bfa145118dce5797b21a5a2fce24926e9aea0915025f0c3c8ee3afa1056b1f69533ae53047ab67a864187397d11c8713a28e991b442f12541414d3" } ], "purl": "pkg:npm/side-channel-list@1.0.1", "type": "library", "bom-ref": "pkg:npm/side-channel-list@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "side-channel-map", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5428c235f80cb1bcb7b53768d369db8ed33f7b0adaea33c79a94e17a7913621f291bdb9c67fd4ff12a38bb814605e93f063a4e56c0c23282c0fe2b8128815744" } ], "purl": "pkg:npm/side-channel-map@1.0.1", "type": "library", "bom-ref": "pkg:npm/side-channel-map@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "side-channel-weakmap", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "58f4bf1ef1d04d89c78ac2e8f4c72a0473899361641cefed969be5772ae77a6e1a790a7885a8b7832b61b3083aa74d684a84e5e7cadca621408c5d9baf6024d8" } ], "purl": "pkg:npm/side-channel-weakmap@1.0.2", "type": "library", "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "side-channel", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb1e9d2bacc97694f3178b1078d631c2dbc1cdfe848381ad95eb12f781cebd3b9d51ec8ad965c06887e60e0b32b2562b441785225b22e78018b05194ba19afad" } ], "purl": "pkg:npm/side-channel@1.1.1", "type": "library", "bom-ref": "pkg:npm/side-channel@1.1.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "statuses", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0ef132e795770c1eee927468fb888e193e5f3f5b2547cc10a2155d9278a064f32932cb5a289416870898040089137525da94e70138a18416274616501c606247" } ], "purl": "pkg:npm/statuses@2.0.2", "type": "library", "bom-ref": "pkg:npm/statuses@2.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "toidentifier", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744" } ], "purl": "pkg:npm/toidentifier@1.0.1", "type": "library", "bom-ref": "pkg:npm/toidentifier@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "type-is", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7da607c346a705b73f916177cc54c49f14853801945fd1856ce06d86f0dd2ec22512858e14eb52d3380289063022c90bf6219764bde40170fc3a86781a63004c" } ], "purl": "pkg:npm/type-is@2.1.0", "type": "library", "bom-ref": "pkg:npm/type-is@2.1.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "unpipe", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29" } ], "purl": "pkg:npm/unpipe@1.0.0", "type": "library", "bom-ref": "pkg:npm/unpipe@1.0.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "vary", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa" } ], "purl": "pkg:npm/vary@1.1.2", "type": "library", "bom-ref": "pkg:npm/vary@1.1.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "which", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c" } ], "purl": "pkg:npm/which@2.0.2", "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" } ], "purl": "pkg:npm/wrappy@1.0.2", "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "ws", "version": "8.21.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "56ca76f1bec345c8a6150bebaaed967a4df3d626310c25aa1d807c42c9e4fd2e117da090ccf18fc8136e563255ddc77a5222ad52da7ab0d33bee05afcdc087fa" } ], "purl": "pkg:npm/ws@8.21.0", "type": "library", "bom-ref": "pkg:npm/ws@8.21.0", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "ImportedModules", "value": "ws,WebSocket,ws/WebSocket,WebSocketServer,ws/WebSocketServer" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ], "occurrences": [ { "location": "dist/index.js", "line": 5 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 5 }, { "location": "dist/bridge/index.mjs", "line": 5 }, { "location": "src/opencode-harness.ts", "line": 60 } ] } }, { "group": "", "name": "zod-to-json-schema", "version": "3.25.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3bf3e07e7a53d712920de4184827d12391b2de13dff7598a543b982d41d924c883169b6f3f8d4c4a75a87e6f1d9c29b4db9e9935f64833b0d2cee48c0059e31c" } ], "purl": "pkg:npm/zod-to-json-schema@3.25.2", "type": "library", "bom-ref": "pkg:npm/zod-to-json-schema@3.25.2", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ] } }, { "group": "", "name": "zod", "version": "3.25.76", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "83352dfeab7cd675ec14628815c0b76277c4031e4d92e9c27e70e5bee0524854b4d9b717bb82e679ad001485306cb5b158fc7777da7c4b94286ae8ca70d43171" } ], "purl": "pkg:npm/zod@3.25.76", "type": "library", "bom-ref": "pkg:npm/zod@3.25.76", "properties": [ { "name": "SrcFile", "value": "src/bridge/pnpm-lock.yaml" }, { "name": "ImportedModules", "value": "zod/v4,zod/v4/z" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/bridge/pnpm-lock.yaml" } ], "concludedValue": "src/bridge/pnpm-lock.yaml" } ], "occurrences": [ { "location": "dist/index.js", "line": 6 }, { "location": "dist/index.js", "line": 719 }, { "location": "dist/index.js", "line": 735 }, { "location": "dist/index.js", "line": 736 }, { "location": "dist/index.js", "line": 737 }, { "location": "dist/index.js", "line": 738 }, { "location": "dist/index.js", "line": 739 }, { "location": "dist/index.js", "line": 740 }, { "location": "dist/index.js", "line": 741 }, { "location": "dist/index.js", "line": 742 }, { "location": "dist/index.js", "line": 743 }, { "location": "dist/index.js", "line": 744 }, { "location": "dist/index.js", "line": 745 }, { "location": "dist/index.js", "line": 747 }, { "location": "dist/index.js", "line": 757 }, { "location": "dist/index.js", "line": 768 }, { "location": "dist/index.js", "line": 769 }, { "location": "dist/index.js", "line": 770 }, { "location": "dist/index.js", "line": 777 }, { "location": "dist/index.js", "line": 778 }, { "location": "dist/index.js", "line": 779 }, { "location": "dist/index.js", "line": 780 }, { "location": "dist/index.js", "line": 787 }, { "location": "dist/index.js", "line": 788 }, { "location": "dist/index.js", "line": 789 }, { "location": "dist/index.js", "line": 790 }, { "location": "dist/index.js", "line": 791 }, { "location": "dist/index.js", "line": 798 }, { "location": "dist/index.js", "line": 804 }, { "location": "dist/index.js", "line": 805 }, { "location": "dist/index.js", "line": 806 }, { "location": "dist/index.js", "line": 813 }, { "location": "dist/index.js", "line": 814 }, { "location": "dist/index.js", "line": 815 }, { "location": "dist/index.js", "line": 820 }, { "location": "dist/index.js", "line": 824 }, { "location": "dist/index.js", "line": 825 }, { "location": "dist/index.js", "line": 826 }, { "location": "dist/index.js", "line": 831 }, { "location": "dist/index.js", "line": 835 }, { "location": "dist/index.js", "line": 836 }, { "location": "dist/index.js", "line": 837 }, { "location": "dist/index.js", "line": 838 }, { "location": "dist/index.js", "line": 843 }, { "location": "dist/index.js", "line": 844 }, { "location": "dist/index.js", "line": 845 }, { "location": "dist/index.js", "line": 846 }, { "location": "dist/index.js", "line": 852 }, { "location": "dist/index.js", "line": 853 }, { "location": "dist/index.js", "line": 854 }, { "location": "dist/index.js", "line": 855 }, { "location": "dist/index.js", "line": 856 }, { "location": "dist/index.js", "line": 858 }, { "location": "dist/index.js", "line": 859 }, { "location": "dist/index.js", "line": 861 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 6 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 95 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 104 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 108 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 109 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 110 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 111 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 112 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 113 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 114 }, { "location": "dist/bridge/host-tool-mcp.mjs", "line": 115 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 1 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 35 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 52 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 62 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 64 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 66 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 68 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 70 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 72 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 74 }, { "location": "src/bridge/json-schema-to-zod.ts", "line": 76 }, { "location": "src/opencode-bridge-protocol.ts", "line": 8 }, { "location": "src/opencode-bridge-protocol.ts", "line": 13 }, { "location": "src/opencode-bridge-protocol.ts", "line": 36 }, { "location": "src/opencode-bridge-protocol.ts", "line": 37 }, { "location": "src/opencode-bridge-protocol.ts", "line": 38 }, { "location": "src/opencode-bridge-protocol.ts", "line": 39 }, { "location": "src/opencode-bridge-protocol.ts", "line": 40 }, { "location": "src/opencode-bridge-protocol.ts", "line": 41 }, { "location": "src/opencode-bridge-protocol.ts", "line": 42 }, { "location": "src/opencode-bridge-protocol.ts", "line": 43 }, { "location": "src/opencode-bridge-protocol.ts", "line": 44 }, { "location": "src/opencode-bridge-protocol.ts", "line": 45 }, { "location": "src/opencode-bridge-protocol.ts", "line": 46 }, { "location": "src/opencode-bridge-protocol.ts", "line": 51 }, { "location": "src/opencode-harness.ts", "line": 61 }, { "location": "src/opencode-harness.ts", "line": 151 }, { "location": "src/opencode-harness.ts", "line": 163 }, { "location": "src/opencode-harness.ts", "line": 164 }, { "location": "src/opencode-harness.ts", "line": 165 }, { "location": "src/opencode-harness.ts", "line": 172 }, { "location": "src/opencode-harness.ts", "line": 173 }, { "location": "src/opencode-harness.ts", "line": 174 }, { "location": "src/opencode-harness.ts", "line": 175 }, { "location": "src/opencode-harness.ts", "line": 182 }, { "location": "src/opencode-harness.ts", "line": 183 }, { "location": "src/opencode-harness.ts", "line": 184 }, { "location": "src/opencode-harness.ts", "line": 185 }, { "location": "src/opencode-harness.ts", "line": 186 }, { "location": "src/opencode-harness.ts", "line": 193 }, { "location": "src/opencode-harness.ts", "line": 194 }, { "location": "src/opencode-harness.ts", "line": 201 }, { "location": "src/opencode-harness.ts", "line": 202 }, { "location": "src/opencode-harness.ts", "line": 203 }, { "location": "src/opencode-harness.ts", "line": 210 }, { "location": "src/opencode-harness.ts", "line": 211 }, { "location": "src/opencode-harness.ts", "line": 212 }, { "location": "src/opencode-harness.ts", "line": 217 }, { "location": "src/opencode-harness.ts", "line": 218 }, { "location": "src/opencode-harness.ts", "line": 223 }, { "location": "src/opencode-harness.ts", "line": 224 }, { "location": "src/opencode-harness.ts", "line": 225 }, { "location": "src/opencode-harness.ts", "line": 230 }, { "location": "src/opencode-harness.ts", "line": 231 }, { "location": "src/opencode-harness.ts", "line": 236 }, { "location": "src/opencode-harness.ts", "line": 237 }, { "location": "src/opencode-harness.ts", "line": 239 }, { "location": "src/opencode-harness.ts", "line": 240 }, { "location": "src/opencode-harness.ts", "line": 241 }, { "location": "src/opencode-harness.ts", "line": 242 }, { "location": "src/opencode-harness.ts", "line": 250 }, { "location": "src/opencode-harness.ts", "line": 251 }, { "location": "src/opencode-harness.ts", "line": 252 }, { "location": "src/opencode-harness.ts", "line": 253 }, { "location": "src/opencode-harness.ts", "line": 266 }, { "location": "src/opencode-harness.ts", "line": 267 }, { "location": "src/opencode-harness.ts", "line": 268 }, { "location": "src/opencode-harness.ts", "line": 269 }, { "location": "src/opencode-harness.ts", "line": 270 }, { "location": "src/opencode-harness.ts", "line": 273 }, { "location": "src/opencode-harness.ts", "line": 274 }, { "location": "src/opencode-harness.ts", "line": 276 } ] } } ], "dependencies": [ { "ref": "pkg:npm/harness-opencode-bridge@0.0.0", "dependsOn": [ "pkg:npm/@modelcontextprotocol/sdk@1.32.2", "pkg:npm/@opencode-ai/sdk@1.19.5", "pkg:npm/@vscode/ripgrep@1.18.0", "pkg:npm/opencode-ai@1.19.5", "pkg:npm/ws@8.21.0", "pkg:npm/zod@3.25.76" ] }, { "ref": "pkg:npm/@hono/node-server@2.1.6", "dependsOn": [ "pkg:npm/hono@4.13.16" ] }, { "ref": "pkg:npm/@modelcontextprotocol/sdk@1.32.2", "dependsOn": [ "pkg:npm/@hono/node-server@2.1.6", "pkg:npm/ajv-formats@3.0.1", "pkg:npm/ajv@8.20.0", "pkg:npm/content-type@1.0.5", "pkg:npm/cors@2.8.6", "pkg:npm/cross-spawn@7.0.6", "pkg:npm/eventsource-parser@3.1.1", "pkg:npm/eventsource@3.0.7", "pkg:npm/express-rate-limit@8.7.3", "pkg:npm/express@5.3.0", "pkg:npm/hono@4.13.16", "pkg:npm/jose@6.2.15", "pkg:npm/json-schema-typed@8.0.2", "pkg:npm/pkce-challenge@5.0.1", "pkg:npm/raw-body@3.0.2", "pkg:npm/zod-to-json-schema@3.25.2", "pkg:npm/zod@3.25.76" ] }, { "ref": "pkg:npm/@opencode-ai/sdk@1.19.5", "dependsOn": [ "pkg:npm/cross-spawn@7.0.6" ] }, { "ref": "pkg:npm/@vscode/ripgrep-darwin-arm64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-darwin-x64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-arm64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-arm@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-ia32@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-ppc64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-riscv64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-s390x@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-linux-x64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-win32-arm64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-win32-ia32@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep-win32-x64@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/@vscode/ripgrep@1.18.0", "dependsOn": [] }, { "ref": "pkg:npm/accepts@2.0.0", "dependsOn": [ "pkg:npm/mime-types@3.0.2", "pkg:npm/negotiator@1.1.0" ] }, { "ref": "pkg:npm/ajv-formats@3.0.1", "dependsOn": [ "pkg:npm/ajv@8.20.0" ] }, { "ref": "pkg:npm/ajv@8.20.0", "dependsOn": [ "pkg:npm/fast-deep-equal@3.1.3", "pkg:npm/fast-uri@3.1.9", "pkg:npm/json-schema-traverse@1.0.0", "pkg:npm/require-from-string@2.0.2" ] }, { "ref": "pkg:npm/body-parser@2.4.0", "dependsOn": [ "pkg:npm/bytes@3.1.2", "pkg:npm/content-type@2.1.0", "pkg:npm/debug@4.4.3", "pkg:npm/http-errors@2.0.1", "pkg:npm/iconv-lite@0.7.3", "pkg:npm/on-finished@2.4.2", "pkg:npm/qs@6.17.1", "pkg:npm/raw-body@3.0.2", "pkg:npm/type-is@2.1.0" ] }, { "ref": "pkg:npm/bytes@3.1.2", "dependsOn": [] }, { "ref": "pkg:npm/call-bind-apply-helpers@1.0.2", "dependsOn": [ "pkg:npm/es-errors@1.3.0", "pkg:npm/function-bind@1.1.2" ] }, { "ref": "pkg:npm/call-bound@1.0.4", "dependsOn": [ "pkg:npm/call-bind-apply-helpers@1.0.2", "pkg:npm/get-intrinsic@1.3.0" ] }, { "ref": "pkg:npm/content-disposition@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/content-type@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/content-type@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/cookie-signature@1.2.2", "dependsOn": [] }, { "ref": "pkg:npm/cookie@0.7.2", "dependsOn": [] }, { "ref": "pkg:npm/cors@2.8.6", "dependsOn": [ "pkg:npm/object-assign@4.1.1", "pkg:npm/vary@1.1.2" ] }, { "ref": "pkg:npm/cross-spawn@7.0.6", "dependsOn": [ "pkg:npm/path-key@3.1.1", "pkg:npm/shebang-command@2.0.0", "pkg:npm/which@2.0.2" ] }, { "ref": "pkg:npm/debug@4.4.3", "dependsOn": [ "pkg:npm/ms@2.1.3" ] }, { "ref": "pkg:npm/depd@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/dunder-proto@1.0.1", "dependsOn": [ "pkg:npm/call-bind-apply-helpers@1.0.2", "pkg:npm/es-errors@1.3.0", "pkg:npm/gopd@1.2.0" ] }, { "ref": "pkg:npm/ee-first@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/encodeurl@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/es-define-property@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/es-errors@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/es-object-atoms@1.1.2", "dependsOn": [ "pkg:npm/es-errors@1.3.0" ] }, { "ref": "pkg:npm/escape-html@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/etag@1.8.1", "dependsOn": [] }, { "ref": "pkg:npm/eventsource-parser@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/eventsource@3.0.7", "dependsOn": [ "pkg:npm/eventsource-parser@3.1.1" ] }, { "ref": "pkg:npm/express-rate-limit@8.7.3", "dependsOn": [ "pkg:npm/debug@4.4.3", "pkg:npm/express@5.3.0", "pkg:npm/ip-address@10.7.6" ] }, { "ref": "pkg:npm/express@5.3.0", "dependsOn": [ "pkg:npm/accepts@2.0.0", "pkg:npm/body-parser@2.4.0", "pkg:npm/content-disposition@2.0.1", "pkg:npm/content-type@2.1.0", "pkg:npm/cookie-signature@1.2.2", "pkg:npm/cookie@0.7.2", "pkg:npm/debug@4.4.3", "pkg:npm/depd@2.0.0", "pkg:npm/encodeurl@2.0.1", "pkg:npm/escape-html@1.0.3", "pkg:npm/etag@1.8.1", "pkg:npm/finalhandler@2.1.1", "pkg:npm/fresh@2.0.0", "pkg:npm/http-errors@2.0.1", "pkg:npm/merge-descriptors@2.0.0", "pkg:npm/mime-types@3.0.2", "pkg:npm/on-finished@2.4.2", "pkg:npm/once@1.4.0", "pkg:npm/parseurl@1.3.3", "pkg:npm/proxy-addr@2.0.8", "pkg:npm/qs@6.17.1", "pkg:npm/range-parser@1.3.0", "pkg:npm/router@2.2.0", "pkg:npm/send@1.2.1", "pkg:npm/serve-static@2.2.1", "pkg:npm/statuses@2.0.2", "pkg:npm/type-is@2.1.0", "pkg:npm/vary@1.1.2" ] }, { "ref": "pkg:npm/fast-deep-equal@3.1.3", "dependsOn": [] }, { "ref": "pkg:npm/fast-uri@3.1.9", "dependsOn": [] }, { "ref": "pkg:npm/finalhandler@2.1.1", "dependsOn": [ "pkg:npm/debug@4.4.3", "pkg:npm/encodeurl@2.0.1", "pkg:npm/escape-html@1.0.3", "pkg:npm/on-finished@2.4.2", "pkg:npm/parseurl@1.3.3", "pkg:npm/statuses@2.0.2" ] }, { "ref": "pkg:npm/forwarded@0.2.0", "dependsOn": [] }, { "ref": "pkg:npm/fresh@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/function-bind@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/get-intrinsic@1.3.0", "dependsOn": [ "pkg:npm/call-bind-apply-helpers@1.0.2", "pkg:npm/es-define-property@1.0.1", "pkg:npm/es-errors@1.3.0", "pkg:npm/es-object-atoms@1.1.2", "pkg:npm/function-bind@1.1.2", "pkg:npm/get-proto@1.0.1", "pkg:npm/gopd@1.2.0", "pkg:npm/has-symbols@1.1.0", "pkg:npm/hasown@2.0.4", "pkg:npm/math-intrinsics@1.1.0" ] }, { "ref": "pkg:npm/get-proto@1.0.1", "dependsOn": [ "pkg:npm/dunder-proto@1.0.1", "pkg:npm/es-object-atoms@1.1.2" ] }, { "ref": "pkg:npm/gopd@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/has-symbols@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/hasown@2.0.4", "dependsOn": [ "pkg:npm/function-bind@1.1.2" ] }, { "ref": "pkg:npm/hono@4.13.16", "dependsOn": [] }, { "ref": "pkg:npm/http-errors@2.0.1", "dependsOn": [ "pkg:npm/depd@2.0.0", "pkg:npm/inherits@2.0.4", "pkg:npm/setprototypeof@1.2.0", "pkg:npm/statuses@2.0.2", "pkg:npm/toidentifier@1.0.1" ] }, { "ref": "pkg:npm/iconv-lite@0.7.3", "dependsOn": [ "pkg:npm/safer-buffer@2.1.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/ip-address@10.7.6", "dependsOn": [] }, { "ref": "pkg:npm/ipaddr.js@1.9.1", "dependsOn": [] }, { "ref": "pkg:npm/is-promise@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isexe@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/jose@6.2.15", "dependsOn": [] }, { "ref": "pkg:npm/json-schema-traverse@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/json-schema-typed@8.0.2", "dependsOn": [] }, { "ref": "pkg:npm/math-intrinsics@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/media-typer@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/merge-descriptors@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-db@1.54.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-types@3.0.2", "dependsOn": [ "pkg:npm/mime-db@1.54.0" ] }, { "ref": "pkg:npm/ms@2.1.3", "dependsOn": [] }, { "ref": "pkg:npm/negotiator@1.1.0", "dependsOn": [ "pkg:npm/content-type@2.1.0" ] }, { "ref": "pkg:npm/object-assign@4.1.1", "dependsOn": [] }, { "ref": "pkg:npm/object-inspect@1.13.4", "dependsOn": [] }, { "ref": "pkg:npm/on-finished@2.4.2", "dependsOn": [ "pkg:npm/ee-first@1.1.1" ] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/opencode-ai@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-darwin-arm64@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-darwin-x64-baseline@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-darwin-x64@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-linux-arm64-musl@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-linux-arm64@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-linux-x64-baseline-musl@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-linux-x64-baseline@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-linux-x64-musl@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-linux-x64@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-windows-arm64@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-windows-x64-baseline@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/opencode-windows-x64@1.19.5", "dependsOn": [] }, { "ref": "pkg:npm/parseurl@1.3.3", "dependsOn": [] }, { "ref": "pkg:npm/path-key@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/path-to-regexp@8.4.2", "dependsOn": [] }, { "ref": "pkg:npm/pkce-challenge@5.0.1", "dependsOn": [] }, { "ref": "pkg:npm/proxy-addr@2.0.8", "dependsOn": [ "pkg:npm/forwarded@0.2.0", "pkg:npm/ipaddr.js@1.9.1" ] }, { "ref": "pkg:npm/qs@6.17.1", "dependsOn": [ "pkg:npm/es-define-property@1.0.1", "pkg:npm/side-channel@1.1.1" ] }, { "ref": "pkg:npm/range-parser@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/raw-body@3.0.2", "dependsOn": [ "pkg:npm/bytes@3.1.2", "pkg:npm/http-errors@2.0.1", "pkg:npm/iconv-lite@0.7.3", "pkg:npm/unpipe@1.0.0" ] }, { "ref": "pkg:npm/require-from-string@2.0.2", "dependsOn": [] }, { "ref": "pkg:npm/router@2.2.0", "dependsOn": [ "pkg:npm/debug@4.4.3", "pkg:npm/depd@2.0.0", "pkg:npm/is-promise@4.0.0", "pkg:npm/parseurl@1.3.3", "pkg:npm/path-to-regexp@8.4.2" ] }, { "ref": "pkg:npm/safer-buffer@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/send@1.2.1", "dependsOn": [ "pkg:npm/debug@4.4.3", "pkg:npm/encodeurl@2.0.1", "pkg:npm/escape-html@1.0.3", "pkg:npm/etag@1.8.1", "pkg:npm/fresh@2.0.0", "pkg:npm/http-errors@2.0.1", "pkg:npm/mime-types@3.0.2", "pkg:npm/ms@2.1.3", "pkg:npm/on-finished@2.4.2", "pkg:npm/range-parser@1.3.0", "pkg:npm/statuses@2.0.2" ] }, { "ref": "pkg:npm/serve-static@2.2.1", "dependsOn": [ "pkg:npm/encodeurl@2.0.1", "pkg:npm/escape-html@1.0.3", "pkg:npm/parseurl@1.3.3", "pkg:npm/send@1.2.1" ] }, { "ref": "pkg:npm/setprototypeof@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/shebang-command@2.0.0", "dependsOn": [ "pkg:npm/shebang-regex@3.0.0" ] }, { "ref": "pkg:npm/shebang-regex@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/side-channel-list@1.0.1", "dependsOn": [ "pkg:npm/es-errors@1.3.0", "pkg:npm/object-inspect@1.13.4" ] }, { "ref": "pkg:npm/side-channel-map@1.0.1", "dependsOn": [ "pkg:npm/call-bound@1.0.4", "pkg:npm/es-errors@1.3.0", "pkg:npm/get-intrinsic@1.3.0", "pkg:npm/object-inspect@1.13.4" ] }, { "ref": "pkg:npm/side-channel-weakmap@1.0.2", "dependsOn": [ "pkg:npm/call-bound@1.0.4", "pkg:npm/es-errors@1.3.0", "pkg:npm/get-intrinsic@1.3.0", "pkg:npm/object-inspect@1.13.4", "pkg:npm/side-channel-map@1.0.1" ] }, { "ref": "pkg:npm/side-channel@1.1.1", "dependsOn": [ "pkg:npm/es-errors@1.3.0", "pkg:npm/object-inspect@1.13.4", "pkg:npm/side-channel-list@1.0.1", "pkg:npm/side-channel-map@1.0.1", "pkg:npm/side-channel-weakmap@1.0.2" ] }, { "ref": "pkg:npm/statuses@2.0.2", "dependsOn": [] }, { "ref": "pkg:npm/toidentifier@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/type-is@2.1.0", "dependsOn": [ "pkg:npm/content-type@2.1.0", "pkg:npm/media-typer@1.1.1", "pkg:npm/mime-types@3.0.2" ] }, { "ref": "pkg:npm/unpipe@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/vary@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/which@2.0.2", "dependsOn": [ "pkg:npm/isexe@2.0.0" ] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/ws@8.21.0", "dependsOn": [] }, { "ref": "pkg:npm/zod-to-json-schema@3.25.2", "dependsOn": [ "pkg:npm/zod@3.25.76" ] }, { "ref": "pkg:npm/zod@3.25.76", "dependsOn": [] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/harness-opencode-bridge@0.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-10T22:57:49Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, November 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'harness-opencode-bridge' with version '0.0.0'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: src/bridge/pnpm-lock.yaml." } ] }