{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:27441597-ccca-42fe-b5e5-108bca7dfd4f", "version": 1, "metadata": { "timestamp": "2026-11-11T23:06:25Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "authors": [ { "name": "Apollo " } ], "group": "@apollo", "name": "server-gateway-interface", "version": "2.1.0", "description": "Interface used to connect Apollo Gateway to Apollo Server", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apollo/server-gateway-interface@2.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/apollographql/apollo-server.git" }, { "type": "issue-tracker", "url": "https://github.com/apollographql/apollo-server/issues" } ], "type": "library", "bom-ref": "pkg:npm/@apollo/server-gateway-interface@2.1.0", "properties": [ { "name": "SrcFile", "value": "packages/gateway-interface/package-lock.json" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" }, { "name": "cdx:npm:isWorkspace", "value": "true" }, { "name": "ImportedModules", "value": "@apollo/server-gateway-interface,GatewayExecutor,@apollo/server-gateway-interface/GatewayExecutor,GatewayGraphQLRequestContext,@apollo/server-gateway-interface/GatewayGraphQLRequestContext,GatewayInterface,@apollo/server-gateway-interface/GatewayInterface,GatewaySchemaLoadOrUpdateCallback,@apollo/server-gateway-interface/GatewaySchemaLoadOrUpdateCallback,NonFtv1ErrorPath,@apollo/server-gateway-interface/NonFtv1ErrorPath,GatewayGraphQLRequest,@apollo/server-gateway-interface/GatewayGraphQLRequest,GatewayGraphQLResponse,@apollo/server-gateway-interface/GatewayGraphQLResponse,GatewaySchemaHash,@apollo/server-gateway-interface/GatewaySchemaHash,GatewayUnsubscriber,@apollo/server-gateway-interface/GatewayUnsubscriber" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:resolvedPath", "value": "packages/gateway-interface" }, { "name": "cdx:npm:isLink", "value": "true" }, { "name": "cdx:npm:manifestSourceType", "value": "path" }, { "name": "cdx:npm:manifestSource", "value": "file:/app/packages/gateway-interface" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 73 }, { "location": "packages/server/src/ApolloServer.ts", "line": 1 }, { "location": "packages/server/src/externalTypes/constructor.ts", "line": 20 }, { "location": "packages/server/src/externalTypes/requestPipeline.ts", "line": 22 }, { "location": "packages/server/src/plugin/usageReporting/stats.ts", "line": 1 }, { "location": "packages/server/src/utils/makeGatewayGraphQLRequestContext.ts", "line": 6 }, { "location": "packages/server/src/utils/schemaManager.ts", "line": 7 } ] }, "tags": [ "connect" ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@aashutoshrathi\\n@ampproject\\n@apollo\\n@ardatan\\n@babel\\n@bcoe\\n@changesets\\n@cspell\\n@emnapi\\n@eslint\\n@eslint-community\\n@fastify\\n@graphql-codegen\\n@graphql-tools\\n@graphql-typed-document-node\\n@humanfs\\n@humanwhocodes\\n@inquirer\\n@isaacs\\n@istanbuljs\\n@jest\\n@josephg\\n@jridgewell\\n@manypkg\\n@mswjs\\n@napi-rs\\n@noble\\n@nodelib\\n@npmcli\\n@open-draft\\n@opentelemetry\\n@paralleldrive\\n@pkgjs\\n@pkgr\\n@protobufjs\\n@repeaterjs\\n@rollup\\n@rtsao\\n@sinclair\\n@sinonjs\\n@tootallnate\\n@tybys\\n@types\\n@typescript-eslint\\n@ungap\\n@unrs\\n@whatwg-node\\n@wry" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json\\npackages/cache-control-types/package-lock.json\\npackages/gateway-interface/package-lock.json\\npackages/integration-testsuite/package-lock.json\\npackages/plugin-response-cache/package-lock.json\\npackages/server/package-lock.json\\npackages/usage-reporting-protobuf/package-lock.json" } ] }, "components": [ { "group": "", "name": "graphql", "version": "16.11.0", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graphql@16.11.0", "type": "library", "bom-ref": "pkg:npm/graphql@16.11.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ImportedModules", "value": "graphql,GraphQLSchema,graphql/GraphQLSchema,GraphQLObjectType,graphql/GraphQLObjectType,GraphQLString,graphql/GraphQLString,GraphQLError,graphql/GraphQLError,printSchema,graphql/printSchema,GraphQLScalarType,graphql/GraphQLScalarType,BREAK,graphql/BREAK,getIntrospectionQuery,graphql/getIntrospectionQuery,getOperationAST,graphql/getOperationAST,GraphQLInt,graphql/GraphQLInt,GraphQLNonNull,graphql/GraphQLNonNull,assertValidSchema,graphql/assertValidSchema,print,graphql/print,execute,graphql/execute,getNamedType,graphql/getNamedType,isCompositeType,graphql/isCompositeType,isInterfaceType,graphql/isInterfaceType,isObjectType,graphql/isObjectType,responsePathAsArray,graphql/responsePathAsArray,isScalarType,graphql/isScalarType,isNonNullType,graphql/isNonNullType,validateSchema,graphql/validateSchema,buildSchema,graphql/buildSchema,subscribe,graphql/subscribe,specifiedRules,graphql/specifiedRules,validate,graphql/validate,parse,graphql/parse,Kind,graphql/Kind,defaultFieldResolver,graphql/defaultFieldResolver,GraphQLCompositeType,graphql/GraphQLCompositeType,GraphQLResolveInfo,graphql/GraphQLResolveInfo,DocumentNode,graphql/DocumentNode,ExecutionResult,graphql/ExecutionResult,GraphQLFormattedError,graphql/GraphQLFormattedError,OperationDefinitionNode,graphql/OperationDefinitionNode,ValidationContext,graphql/ValidationContext,FieldNode,graphql/FieldNode,ExecutionArgs,graphql/ExecutionArgs,FormattedExecutionResult,graphql/FormattedExecutionResult,GraphQLFieldResolver,graphql/GraphQLFieldResolver,ParseOptions,graphql/ParseOptions,TypedQueryDocumentNode,graphql/TypedQueryDocumentNode,ValidationRule,graphql/ValidationRule,GraphQLErrorExtensions,graphql/GraphQLErrorExtensions,GraphQLErrorOptions,graphql/GraphQLErrorOptions,DirectiveNode,graphql/DirectiveNode,GraphQLField,graphql/GraphQLField,ResponsePath,graphql/ResponsePath,ASTVisitor,graphql/ASTVisitor" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "packages/integration-testsuite/dist/cjs/apolloServerTests.js", "line": 45 }, { "location": "packages/integration-testsuite/dist/cjs/httpServerTests.js", "line": 42 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 6 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 71 }, { "location": "packages/integration-testsuite/dist/esm/httpServerTests.js", "line": 3 }, { "location": "packages/integration-testsuite/dist/esm/httpServerTests.js", "line": 1287 }, { "location": "packages/integration-testsuite/dist/esm/httpServerTests.js", "line": 1641 }, { "location": "packages/server/dist/cjs/ApolloServer.js", "line": 47 }, { "location": "packages/server/dist/cjs/errorNormalize.js", "line": 6 }, { "location": "packages/server/dist/cjs/errors/index.js", "line": 5 }, { "location": "packages/server/dist/cjs/incrementalDeliveryPolyfill.js", "line": 37 }, { "location": "packages/server/dist/cjs/incrementalDeliveryPolyfill.js", "line": 45 }, { "location": "packages/server/dist/cjs/internalErrorClasses.js", "line": 4 }, { "location": "packages/server/dist/cjs/plugin/cacheControl/index.js", "line": 4 }, { "location": "packages/server/dist/cjs/plugin/schemaIsSubgraph.js", "line": 4 }, { "location": "packages/server/dist/cjs/plugin/schemaReporting/index.js", "line": 9 }, { "location": "packages/server/dist/cjs/plugin/subscriptionCallback/index.js", "line": 8 }, { "location": "packages/server/dist/cjs/plugin/traceTreeBuilder.js", "line": 5 }, { "location": "packages/server/dist/cjs/plugin/usageReporting/plugin.js", "line": 11 }, { "location": "packages/server/dist/cjs/requestPipeline.js", "line": 9 }, { "location": "packages/server/dist/cjs/runHttpQuery.js", "line": 11 }, { "location": "packages/server/dist/cjs/utils/schemaInstrumentation.js", "line": 7 }, { "location": "packages/server/dist/cjs/validationRules/NoIntrospection.js", "line": 4 }, { "location": "packages/server/dist/cjs/validationRules/RecursiveSelectionsLimit.js", "line": 5 }, { "location": "packages/server/dist/esm/ApolloServer.js", "line": 5 }, { "location": "packages/server/dist/esm/ApolloServer.js", "line": 329 }, { "location": "packages/server/dist/esm/ApolloServer.js", "line": 336 }, { "location": "packages/server/dist/esm/ApolloServer.js", "line": 607 }, { "location": "packages/server/dist/esm/errorNormalize.js", "line": 1 }, { "location": "packages/server/dist/esm/errors/index.js", "line": 1 }, { "location": "packages/server/dist/esm/incrementalDeliveryPolyfill.js", "line": 1 }, { "location": "packages/server/dist/esm/incrementalDeliveryPolyfill.js", "line": 9 }, { "location": "packages/server/dist/esm/incrementalDeliveryPolyfill.js", "line": 36 }, { "location": "packages/server/dist/esm/internalErrorClasses.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/cacheControl/index.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/cacheControl/index.js", "line": 68 }, { "location": "packages/server/dist/esm/plugin/cacheControl/index.js", "line": 69 }, { "location": "packages/server/dist/esm/plugin/cacheControl/index.js", "line": 94 }, { "location": "packages/server/dist/esm/plugin/cacheControl/index.js", "line": 99 }, { "location": "packages/server/dist/esm/plugin/schemaIsSubgraph.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/schemaIsSubgraph.js", "line": 4 }, { "location": "packages/server/dist/esm/plugin/schemaIsSubgraph.js", "line": 12 }, { "location": "packages/server/dist/esm/plugin/schemaIsSubgraph.js", "line": 15 }, { "location": "packages/server/dist/esm/plugin/schemaReporting/index.js", "line": 3 }, { "location": "packages/server/dist/esm/plugin/schemaReporting/index.js", "line": 26 }, { "location": "packages/server/dist/esm/plugin/schemaReporting/index.js", "line": 69 }, { "location": "packages/server/dist/esm/plugin/subscriptionCallback/index.js", "line": 2 }, { "location": "packages/server/dist/esm/plugin/subscriptionCallback/index.js", "line": 65 }, { "location": "packages/server/dist/esm/plugin/traceTreeBuilder.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 4 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 108 }, { "location": "packages/server/dist/esm/requestPipeline.js", "line": 2 }, { "location": "packages/server/dist/esm/requestPipeline.js", "line": 89 }, { "location": "packages/server/dist/esm/requestPipeline.js", "line": 101 }, { "location": "packages/server/dist/esm/requestPipeline.js", "line": 103 }, { "location": "packages/server/dist/esm/requestPipeline.js", "line": 117 }, { "location": "packages/server/dist/esm/runHttpQuery.js", "line": 2 }, { "location": "packages/server/dist/esm/utils/schemaInstrumentation.js", "line": 1 }, { "location": "packages/server/dist/esm/utils/schemaInstrumentation.js", "line": 14 }, { "location": "packages/server/dist/esm/validationRules/NoIntrospection.js", "line": 1 }, { "location": "packages/server/dist/esm/validationRules/RecursiveSelectionsLimit.js", "line": 1 }, { "location": "packages/cache-control-types/src/index.ts", "line": 1 }, { "location": "packages/gateway-interface/src/index.ts", "line": 9 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 19 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 148 }, { "location": "packages/integration-testsuite/src/httpServerTests.ts", "line": 21 }, { "location": "packages/integration-testsuite/src/httpServerTests.ts", "line": 1463 }, { "location": "packages/integration-testsuite/src/httpServerTests.ts", "line": 1861 }, { "location": "packages/server/src/ApolloServer.ts", "line": 27 }, { "location": "packages/server/src/ApolloServer.ts", "line": 772 }, { "location": "packages/server/src/ApolloServer.ts", "line": 789 }, { "location": "packages/server/src/ApolloServer.ts", "line": 1301 }, { "location": "packages/server/src/errorNormalize.ts", "line": 7 }, { "location": "packages/server/src/errors/index.ts", "line": 1 }, { "location": "packages/server/src/externalTypes/constructor.ts", "line": 18 }, { "location": "packages/server/src/externalTypes/graphql.ts", "line": 11 }, { "location": "packages/server/src/externalTypes/incrementalDeliveryPolyfillAlpha2.ts", "line": 1 }, { "location": "packages/server/src/externalTypes/incrementalDeliveryPolyfillAlpha9.ts", "line": 1 }, { "location": "packages/server/src/externalTypes/plugins.ts", "line": 8 }, { "location": "packages/server/src/externalTypes/requestPipeline.ts", "line": 20 }, { "location": "packages/server/src/incrementalDeliveryPolyfill.ts", "line": 6 }, { "location": "packages/server/src/incrementalDeliveryPolyfill.ts", "line": 200 }, { "location": "packages/server/src/incrementalDeliveryPolyfill.ts", "line": 252 }, { "location": "packages/server/src/internalErrorClasses.ts", "line": 1 }, { "location": "packages/server/src/plugin/cacheControl/index.ts", "line": 11 }, { "location": "packages/server/src/plugin/cacheControl/index.ts", "line": 170 }, { "location": "packages/server/src/plugin/cacheControl/index.ts", "line": 171 }, { "location": "packages/server/src/plugin/cacheControl/index.ts", "line": 242 }, { "location": "packages/server/src/plugin/cacheControl/index.ts", "line": 249 }, { "location": "packages/server/src/plugin/schemaIsSubgraph.ts", "line": 6 }, { "location": "packages/server/src/plugin/schemaIsSubgraph.ts", "line": 25 }, { "location": "packages/server/src/plugin/schemaIsSubgraph.ts", "line": 34 }, { "location": "packages/server/src/plugin/schemaIsSubgraph.ts", "line": 37 }, { "location": "packages/server/src/plugin/schemaReporting/index.ts", "line": 3 }, { "location": "packages/server/src/plugin/schemaReporting/index.ts", "line": 94 }, { "location": "packages/server/src/plugin/schemaReporting/index.ts", "line": 95 }, { "location": "packages/server/src/plugin/schemaReporting/index.ts", "line": 161 }, { "location": "packages/server/src/plugin/subscriptionCallback/index.ts", "line": 4 }, { "location": "packages/server/src/plugin/subscriptionCallback/index.ts", "line": 123 }, { "location": "packages/server/src/plugin/traceTreeBuilder.ts", "line": 7 }, { "location": "packages/server/src/plugin/usageReporting/options.ts", "line": 1 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 9 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 225 }, { "location": "packages/server/src/requestPipeline.ts", "line": 10 }, { "location": "packages/server/src/requestPipeline.ts", "line": 244 }, { "location": "packages/server/src/requestPipeline.ts", "line": 263 }, { "location": "packages/server/src/requestPipeline.ts", "line": 270 }, { "location": "packages/server/src/requestPipeline.ts", "line": 317 }, { "location": "packages/server/src/runHttpQuery.ts", "line": 20 }, { "location": "packages/server/src/utils/schemaInstrumentation.ts", "line": 8 }, { "location": "packages/server/src/utils/schemaInstrumentation.ts", "line": 33 }, { "location": "packages/server/src/utils/schemaManager.ts", "line": 2 }, { "location": "packages/server/src/validationRules/NoIntrospection.ts", "line": 5 }, { "location": "packages/server/src/validationRules/RecursiveSelectionsLimit.ts", "line": 6 } ] } }, { "group": "@apollo", "name": "utils.fetcher", "version": "3.0.0", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apollo/utils.fetcher@3.0.0", "type": "library", "bom-ref": "pkg:npm/@apollo/utils.fetcher@3.0.0", "properties": [ { "name": "SrcFile", "value": "packages/gateway-interface/package-lock.json" }, { "name": "ImportedModules", "value": "@apollo/utils.fetcher,FetcherHeaders,@apollo/utils.fetcher/FetcherHeaders,Fetcher,@apollo/utils.fetcher/Fetcher,FetcherResponse,@apollo/utils.fetcher/FetcherResponse" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "SrcFile", "value": "packages/server/package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "packages/server/package-lock.json" } ], "concludedValue": "packages/server/package-lock.json" } ], "occurrences": [ { "location": "packages/gateway-interface/src/index.ts", "line": 12 }, { "location": "packages/server/src/plugin/schemaReporting/index.ts", "line": 8 }, { "location": "packages/server/src/plugin/schemaReporting/schemaReporter.ts", "line": 9 }, { "location": "packages/server/src/plugin/subscriptionCallback/index.ts", "line": 1 }, { "location": "packages/server/src/plugin/usageReporting/options.ts", "line": 10 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 2 }, { "location": "packages/server/src/utils/makeGatewayGraphQLRequestContext.ts", "line": 7 } ] } }, { "group": "@apollo", "name": "utils.logger", "version": "3.0.0", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apollo/utils.logger@3.0.0", "type": "library", "bom-ref": "pkg:npm/@apollo/utils.logger@3.0.0", "properties": [ { "name": "SrcFile", "value": "packages/gateway-interface/package-lock.json" }, { "name": "ImportedModules", "value": "@apollo/utils.logger,Logger,@apollo/utils.logger/Logger" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "SrcFile", "value": "packages/integration-testsuite/package-lock.json" }, { "name": "SrcFile", "value": "packages/plugin-response-cache/package-lock.json" }, { "name": "SrcFile", "value": "packages/server/package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "packages/server/package-lock.json" } ], "concludedValue": "packages/server/package-lock.json" } ], "occurrences": [ { "location": "packages/gateway-interface/src/index.ts", "line": 10 }, { "location": "packages/server/src/ApolloServer.ts", "line": 8 }, { "location": "packages/server/src/externalTypes/constructor.ts", "line": 7 }, { "location": "packages/server/src/externalTypes/plugins.ts", "line": 7 }, { "location": "packages/server/src/externalTypes/requestPipeline.ts", "line": 13 }, { "location": "packages/server/src/plugin/schemaReporting/schemaReporter.ts", "line": 2 }, { "location": "packages/server/src/plugin/subscriptionCallback/index.ts", "line": 2 }, { "location": "packages/server/src/plugin/usageReporting/operationDerivedDataCache.ts", "line": 1 }, { "location": "packages/server/src/plugin/usageReporting/options.ts", "line": 8 }, { "location": "packages/server/src/utils/schemaManager.ts", "line": 1 } ] } }, { "group": "@apollo", "name": "utils.keyvaluecache", "version": "4.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "98ac359b2454910b063cd07ef5b82502e86f8a8749d8bd8c4582d369f08cc39048a3b9dbbc23cd0a42e72078d9d4d3b31fb4a7300af973d2e65e2aac818a8b67" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apollo/utils.keyvaluecache@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@apollo/utils.keyvaluecache/-/utils.keyvaluecache-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@apollo/utils.keyvaluecache@4.0.0", "properties": [ { "name": "SrcFile", "value": "packages/gateway-interface/package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@apollo/utils.keyvaluecache/-/utils.keyvaluecache-4.0.0.tgz" }, { "name": "ImportedModules", "value": "@apollo/utils.keyvaluecache,InMemoryLRUCache,@apollo/utils.keyvaluecache/InMemoryLRUCache,PrefixingKeyValueCache,@apollo/utils.keyvaluecache/PrefixingKeyValueCache,KeyValueCache,@apollo/utils.keyvaluecache/KeyValueCache" }, { "name": "SrcFile", "value": "packages/integration-testsuite/package-lock.json" }, { "name": "SrcFile", "value": "packages/plugin-response-cache/package-lock.json" }, { "name": "SrcFile", "value": "packages/server/package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "packages/server/package-lock.json" } ], "concludedValue": "packages/server/package-lock.json" } ], "occurrences": [ { "location": "packages/integration-testsuite/dist/cjs/apolloServerTests.js", "line": 53 }, { "location": "packages/integration-testsuite/dist/cjs/httpServerTests.js", "line": 44 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 14 }, { "location": "packages/integration-testsuite/dist/esm/httpServerTests.js", "line": 5 }, { "location": "packages/plugin-response-cache/dist/cjs/ApolloServerPluginResponseCache.js", "line": 6 }, { "location": "packages/plugin-response-cache/dist/esm/ApolloServerPluginResponseCache.js", "line": 3 }, { "location": "packages/server/dist/cjs/ApolloServer.js", "line": 44 }, { "location": "packages/server/dist/esm/ApolloServer.js", "line": 2 }, { "location": "packages/server/dist/esm/ApolloServer.js", "line": 39 }, { "location": "packages/gateway-interface/src/index.ts", "line": 1 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 42 }, { "location": "packages/integration-testsuite/src/httpServerTests.ts", "line": 26 }, { "location": "packages/plugin-response-cache/src/ApolloServerPluginResponseCache.ts", "line": 14 }, { "location": "packages/server/src/ApolloServer.ts", "line": 7 }, { "location": "packages/server/src/ApolloServer.ts", "line": 229 }, { "location": "packages/server/src/externalTypes/constructor.ts", "line": 19 }, { "location": "packages/server/src/externalTypes/plugins.ts", "line": 6 }, { "location": "packages/server/src/externalTypes/requestPipeline.ts", "line": 14 } ] } }, { "group": "", "name": "lru-cache", "version": "11.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "4085d9501254c7edb31d4750ba359e8c191c0fdf9cb3de2d2e7d3e60bf14ac287e0f9b025d9e1cecb6841f8f29370458dcc2c382a505ca1942ca324f7f558fd0" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@11.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.1.0.tgz" }, { "name": "ImportedModules", "value": "lru-cache,LRUCache,lru-cache/LRUCache" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "packages/server/dist/cjs/plugin/cacheControl/index.js", "line": 7 }, { "location": "packages/server/dist/cjs/plugin/usageReporting/defaultSendOperationsAsTrace.js", "line": 4 }, { "location": "packages/server/dist/cjs/plugin/usageReporting/operationDerivedDataCache.js", "line": 5 }, { "location": "packages/server/dist/esm/plugin/cacheControl/index.js", "line": 4 }, { "location": "packages/server/dist/esm/plugin/usageReporting/defaultSendOperationsAsTrace.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/usageReporting/operationDerivedDataCache.js", "line": 1 }, { "location": "packages/server/src/plugin/cacheControl/index.ts", "line": 14 }, { "location": "packages/server/src/plugin/usageReporting/defaultSendOperationsAsTrace.ts", "line": 1 }, { "location": "packages/server/src/plugin/usageReporting/operationDerivedDataCache.ts", "line": 3 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 10 } ] } }, { "group": "@apollo", "name": "usage-reporting-protobuf", "version": "4.1.2", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apollo/usage-reporting-protobuf@4.1.2", "type": "library", "bom-ref": "pkg:npm/@apollo/usage-reporting-protobuf@4.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:resolvedPath", "value": "packages/usage-reporting-protobuf" }, { "name": "cdx:npm:isLink", "value": "true" }, { "name": "cdx:npm:manifestSourceType", "value": "path" }, { "name": "cdx:npm:manifestSource", "value": "file:/app/packages/usage-reporting-protobuf" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" }, { "name": "cdx:npm:isWorkspace", "value": "true" }, { "name": "ImportedModules", "value": "@apollo/usage-reporting-protobuf,Report,@apollo/usage-reporting-protobuf/Report,Trace,@apollo/usage-reporting-protobuf/Trace,google,@apollo/usage-reporting-protobuf/google,ReportHeader,@apollo/usage-reporting-protobuf/ReportHeader,IContextualizedStats,@apollo/usage-reporting-protobuf/IContextualizedStats,IFieldStat,@apollo/usage-reporting-protobuf/IFieldStat,IPathErrorStats,@apollo/usage-reporting-protobuf/IPathErrorStats,IQueryLatencyStats,@apollo/usage-reporting-protobuf/IQueryLatencyStats,IReport,@apollo/usage-reporting-protobuf/IReport,IStatsContext,@apollo/usage-reporting-protobuf/IStatsContext,ITracesAndStats,@apollo/usage-reporting-protobuf/ITracesAndStats,ITypeStat,@apollo/usage-reporting-protobuf/ITypeStat" }, { "name": "SrcFile", "value": "packages/usage-reporting-protobuf/package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "packages/usage-reporting-protobuf/package-lock.json" } ], "concludedValue": "packages/usage-reporting-protobuf/package-lock.json" } ], "occurrences": [ { "location": "packages/integration-testsuite/dist/cjs/apolloServerTests.js", "line": 44 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 5 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 643 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 1993 }, { "location": "packages/integration-testsuite/dist/esm/apolloServerTests.js", "line": 2046 }, { "location": "packages/server/dist/cjs/plugin/inlineTrace/index.js", "line": 4 }, { "location": "packages/server/dist/cjs/plugin/traceTreeBuilder.js", "line": 6 }, { "location": "packages/server/dist/cjs/plugin/usageReporting/plugin.js", "line": 8 }, { "location": "packages/server/dist/cjs/plugin/usageReporting/stats.js", "line": 4 }, { "location": "packages/server/dist/cjs/plugin/usageReporting/traceDetails.js", "line": 4 }, { "location": "packages/server/dist/esm/plugin/inlineTrace/index.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/inlineTrace/index.js", "line": 54 }, { "location": "packages/server/dist/esm/plugin/traceTreeBuilder.js", "line": 2 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 137 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 141 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 144 }, { "location": "packages/server/dist/esm/plugin/usageReporting/plugin.js", "line": 373 }, { "location": "packages/server/dist/esm/plugin/usageReporting/stats.js", "line": 1 }, { "location": "packages/server/dist/esm/plugin/usageReporting/stats.js", "line": 28 }, { "location": "packages/server/dist/esm/plugin/usageReporting/traceDetails.js", "line": 1 }, { "location": "packages/gateway-interface/src/index.ts", "line": 11 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 6 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 901 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 2643 }, { "location": "packages/integration-testsuite/src/apolloServerTests.ts", "line": 2713 }, { "location": "packages/server/src/externalTypes/requestPipeline.ts", "line": 6 }, { "location": "packages/server/src/plugin/inlineTrace/index.ts", "line": 1 }, { "location": "packages/server/src/plugin/inlineTrace/index.ts", "line": 134 }, { "location": "packages/server/src/plugin/traceTreeBuilder.ts", "line": 8 }, { "location": "packages/server/src/plugin/usageReporting/defaultSendOperationsAsTrace.ts", "line": 2 }, { "location": "packages/server/src/plugin/usageReporting/iterateOverTrace.ts", "line": 1 }, { "location": "packages/server/src/plugin/usageReporting/options.ts", "line": 9 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 1 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 277 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 281 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 293 }, { "location": "packages/server/src/plugin/usageReporting/plugin.ts", "line": 683 }, { "location": "packages/server/src/plugin/usageReporting/stats.ts", "line": 14 }, { "location": "packages/server/src/plugin/usageReporting/stats.ts", "line": 89 }, { "location": "packages/server/src/plugin/usageReporting/traceDetails.ts", "line": 1 } ] } }, { "group": "@apollo", "name": "protobufjs", "version": "1.2.8", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "afbc4d794a995fe7810449b2bda3f0d3f712cface07f98dd1fc9a3533f329caa4db3f194eef8b64fbb0d71920d9366480fbc308c6f7514281da42ad0b89f2bcc" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apollo/protobufjs@1.2.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@apollo/protobufjs/-/protobufjs-1.2.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@apollo/protobufjs@1.2.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@apollo/protobufjs/-/protobufjs-1.2.8.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/apollo-pbjs, /app/node_modules/.bin/apollo-pbts" }, { "name": "cdx:npm:bin", "value": "apollo-pbjs, apollo-pbts" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "ImportedModules", "value": "@apollo/protobufjs/minimal" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "packages/usage-reporting-protobuf/generated/cjs/protobuf.js", "line": 4 }, { "location": "packages/usage-reporting-protobuf/generated/esm/protobuf.js", "line": 2 } ] } }, { "group": "@protobufjs", "name": "aspromise", "version": "1.1.2", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/aspromise@1.1.2", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/aspromise@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "base64", "version": "1.1.2", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/base64@1.1.2", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/base64@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "codegen", "version": "2.0.4", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/codegen@2.0.4", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/codegen@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "eventemitter", "version": "1.1.0", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/eventemitter@1.1.0", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/eventemitter@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "fetch", "version": "1.1.0", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/fetch@1.1.0", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/fetch@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "inquire", "version": "1.1.0", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/inquire@1.1.0", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/inquire@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "float", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/float@1.0.2", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/float@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "path", "version": "1.1.2", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/path@1.1.2", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/path@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ImportedModules", "value": "path" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "scripts/postcompile.mjs", "line": 11 }, { "location": "scripts/postcompile.mjs", "line": 25 }, { "location": "scripts/postcompile.mjs", "line": 29 }, { "location": "scripts/precompile.mjs", "line": 12 }, { "location": "scripts/precompile.mjs", "line": 16 }, { "location": "scripts/precompile.mjs", "line": 24 }, { "location": "scripts/precompile.mjs", "line": 28 } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "pool", "version": "1.1.0", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/pool@1.1.0", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/pool@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@protobufjs", "name": "utf8", "version": "1.1.0", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40protobufjs/utf8@1.1.0", "type": "framework", "bom-ref": "pkg:npm/@protobufjs/utf8@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@types", "name": "long", "version": "4.0.1", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/long@4.0.1", "type": "library", "bom-ref": "pkg:npm/@types/long@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/long" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "long", "version": "4.0.0", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/long@4.0.0", "type": "library", "bom-ref": "pkg:npm/long@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/graphql@16.11.0", "dependsOn": [] }, { "ref": "pkg:npm/@apollo/utils.fetcher@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@apollo/utils.logger@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@11.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@apollo/utils.keyvaluecache@4.0.0", "dependsOn": [ "pkg:npm/@apollo/utils.logger@3.0.0", "pkg:npm/lru-cache@11.1.0" ] }, { "ref": "pkg:npm/@apollo/usage-reporting-protobuf@4.1.2", "dependsOn": [ "pkg:npm/@apollo/protobufjs@1.2.8" ] }, { "ref": "pkg:npm/@apollo/server-gateway-interface@2.1.0", "dependsOn": [ "pkg:npm/@apollo/usage-reporting-protobuf@4.1.2", "pkg:npm/@apollo/utils.fetcher@3.0.0", "pkg:npm/@apollo/utils.keyvaluecache@4.0.0", "pkg:npm/@apollo/utils.logger@3.0.0", "pkg:npm/graphql@16.11.0" ] }, { "ref": "pkg:npm/@protobufjs/aspromise@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/base64@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/codegen@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/eventemitter@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/inquire@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/fetch@1.1.0", "dependsOn": [ "pkg:npm/@protobufjs/aspromise@1.1.2", "pkg:npm/@protobufjs/inquire@1.1.0" ] }, { "ref": "pkg:npm/@protobufjs/float@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/path@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/pool@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@protobufjs/utf8@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@types/long@4.0.1", "dependsOn": [] }, { "ref": "pkg:npm/long@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@apollo/protobufjs@1.2.8", "dependsOn": [ "pkg:npm/@protobufjs/aspromise@1.1.2", "pkg:npm/@protobufjs/base64@1.1.2", "pkg:npm/@protobufjs/codegen@2.0.4", "pkg:npm/@protobufjs/eventemitter@1.1.0", "pkg:npm/@protobufjs/fetch@1.1.0", "pkg:npm/@protobufjs/float@1.0.2", "pkg:npm/@protobufjs/inquire@1.1.0", "pkg:npm/@protobufjs/path@1.1.2", "pkg:npm/@protobufjs/pool@1.1.0", "pkg:npm/@protobufjs/utf8@1.1.0", "pkg:npm/@types/long@4.0.1", "pkg:npm/long@4.0.0" ] } ] }