{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:75c69bd1-9b25-43a2-b255-5421fc9d8535", "version": 1, "metadata": { "timestamp": "2026-11-01T14:50:14Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "sso", "group": "@better-auth", "version": "1.7.13", "description": "SSO plugin for Better Auth", "purl": "pkg:npm/%40better-auth/sso@1.7.13", "bom-ref": "pkg:npm/@better-auth/sso@1.7.13", "author": "Bereket Engida", "properties": [ { "name": "cdx:npm:scripts", "value": "build, dev, lint:package, lint:types, typecheck, test, coverage" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://www.better-auth.com/docs/plugins/sso" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@better-auth\\n@better-fetch\\n@types\\n@xmldom" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@better-auth/core/package.json\\nnode_modules/@better-auth/kysely-adapter/package.json\\nnode_modules/@better-auth/utils/package.json\\nnode_modules/@better-fetch/fetch/package.json\\nnode_modules/@types/body-parser/package.json\\nnode_modules/@types/express/package.json\\nnode_modules/@xmldom/xmldom/package.json\\nnode_modules/better-auth/package.json\\nnode_modules/better-call/package.json\\nnode_modules/body-parser/package.json\\nnode_modules/express/package.json\\nnode_modules/fast-xml-parser/package.json\\nnode_modules/jose/package.json\\nnode_modules/kysely/package.json\\nnode_modules/oauth2-mock-server/package.json\\nnode_modules/samlify/package.json\\nnode_modules/tldts/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/zod/package.json" } ] }, "components": [ { "authors": [ { "name": "Colin McDonnell " } ], "group": "", "name": "zod", "version": "4.5.4", "description": "TypeScript-first schema declaration and validation library with static type inference", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zod@4.5.4", "externalReferences": [ { "type": "website", "url": "https://zod.dev" }, { "type": "vcs", "url": "git+https://github.com/colinhacks/zod.git" } ], "type": "library", "bom-ref": "pkg:npm/zod@4.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/zod/package.json" }, { "name": "ImportedModules", "value": "zod" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zod/package.json" } ], "concludedValue": "node_modules/zod/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 7 }, { "location": "dist/index.mjs", "line": 1827 }, { "location": "dist/index.mjs", "line": 1828 }, { "location": "dist/index.mjs", "line": 1839 }, { "location": "dist/index.mjs", "line": 1853 }, { "location": "dist/index.mjs", "line": 1854 }, { "location": "dist/index.mjs", "line": 1855 }, { "location": "dist/index.mjs", "line": 1856 }, { "location": "dist/index.mjs", "line": 1857 }, { "location": "dist/index.mjs", "line": 1858 }, { "location": "dist/index.mjs", "line": 1860 }, { "location": "dist/index.mjs", "line": 1861 }, { "location": "dist/index.mjs", "line": 1862 }, { "location": "dist/index.mjs", "line": 1863 }, { "location": "dist/index.mjs", "line": 1864 }, { "location": "dist/index.mjs", "line": 1865 }, { "location": "dist/index.mjs", "line": 1866 }, { "location": "dist/index.mjs", "line": 1868 }, { "location": "dist/index.mjs", "line": 1869 }, { "location": "dist/index.mjs", "line": 1870 }, { "location": "dist/index.mjs", "line": 1871 }, { "location": "dist/index.mjs", "line": 1872 }, { "location": "dist/index.mjs", "line": 1873 }, { "location": "dist/index.mjs", "line": 1874 }, { "location": "dist/index.mjs", "line": 1875 }, { "location": "dist/index.mjs", "line": 1880 }, { "location": "dist/index.mjs", "line": 1881 }, { "location": "dist/index.mjs", "line": 1882 }, { "location": "dist/index.mjs", "line": 1883 }, { "location": "dist/index.mjs", "line": 1884 }, { "location": "dist/index.mjs", "line": 1885 }, { "location": "dist/index.mjs", "line": 1886 }, { "location": "dist/index.mjs", "line": 1887 }, { "location": "dist/index.mjs", "line": 1890 }, { "location": "dist/index.mjs", "line": 1892 }, { "location": "dist/index.mjs", "line": 1893 }, { "location": "dist/index.mjs", "line": 1894 }, { "location": "dist/index.mjs", "line": 1895 }, { "location": "dist/index.mjs", "line": 1896 }, { "location": "dist/index.mjs", "line": 1897 }, { "location": "dist/index.mjs", "line": 1898 }, { "location": "dist/index.mjs", "line": 1899 }, { "location": "dist/index.mjs", "line": 1901 }, { "location": "dist/index.mjs", "line": 1902 }, { "location": "dist/index.mjs", "line": 1903 }, { "location": "dist/index.mjs", "line": 1906 }, { "location": "dist/index.mjs", "line": 1907 }, { "location": "dist/index.mjs", "line": 1908 }, { "location": "dist/index.mjs", "line": 1910 }, { "location": "dist/index.mjs", "line": 1911 }, { "location": "dist/index.mjs", "line": 1914 }, { "location": "dist/index.mjs", "line": 1915 }, { "location": "dist/index.mjs", "line": 1917 }, { "location": "dist/index.mjs", "line": 1918 }, { "location": "dist/index.mjs", "line": 1920 }, { "location": "dist/index.mjs", "line": 1921 }, { "location": "dist/index.mjs", "line": 1924 }, { "location": "dist/index.mjs", "line": 1925 }, { "location": "dist/index.mjs", "line": 1926 }, { "location": "dist/index.mjs", "line": 1927 }, { "location": "dist/index.mjs", "line": 1928 }, { "location": "dist/index.mjs", "line": 1929 }, { "location": "dist/index.mjs", "line": 1930 }, { "location": "dist/index.mjs", "line": 1931 }, { "location": "dist/index.mjs", "line": 1932 }, { "location": "dist/index.mjs", "line": 1934 }, { "location": "dist/index.mjs", "line": 1935 }, { "location": "dist/index.mjs", "line": 1936 }, { "location": "dist/index.mjs", "line": 1937 }, { "location": "dist/index.mjs", "line": 1938 }, { "location": "dist/index.mjs", "line": 1939 }, { "location": "dist/index.mjs", "line": 1942 }, { "location": "dist/index.mjs", "line": 1943 }, { "location": "dist/index.mjs", "line": 1944 }, { "location": "dist/index.mjs", "line": 1945 }, { "location": "dist/index.mjs", "line": 1948 }, { "location": "dist/index.mjs", "line": 1949 }, { "location": "dist/index.mjs", "line": 1954 }, { "location": "dist/index.mjs", "line": 1955 }, { "location": "dist/index.mjs", "line": 1956 }, { "location": "dist/index.mjs", "line": 1965 }, { "location": "dist/index.mjs", "line": 2267 }, { "location": "dist/index.mjs", "line": 2477 }, { "location": "dist/index.mjs", "line": 2525 }, { "location": "dist/index.mjs", "line": 3171 }, { "location": "dist/index.mjs", "line": 3555 }, { "location": "dist/index.mjs", "line": 3556 }, { "location": "dist/index.mjs", "line": 3557 }, { "location": "dist/index.mjs", "line": 3558 }, { "location": "dist/index.mjs", "line": 3559 }, { "location": "dist/index.mjs", "line": 3560 }, { "location": "dist/index.mjs", "line": 3561 }, { "location": "dist/index.mjs", "line": 3562 }, { "location": "dist/index.mjs", "line": 3563 }, { "location": "dist/index.mjs", "line": 3564 }, { "location": "dist/index.mjs", "line": 3566 }, { "location": "dist/index.mjs", "line": 3567 }, { "location": "dist/index.mjs", "line": 3787 }, { "location": "dist/index.mjs", "line": 3788 }, { "location": "dist/index.mjs", "line": 3789 }, { "location": "dist/index.mjs", "line": 3790 }, { "location": "dist/index.mjs", "line": 3791 }, { "location": "dist/index.mjs", "line": 4222 }, { "location": "dist/index.mjs", "line": 4223 }, { "location": "dist/index.mjs", "line": 4224 }, { "location": "dist/index.mjs", "line": 4230 }, { "location": "dist/index.mjs", "line": 4298 }, { "location": "dist/index.mjs", "line": 4299 }, { "location": "dist/index.mjs", "line": 4300 }, { "location": "dist/index.mjs", "line": 4301 }, { "location": "dist/index.mjs", "line": 4302 }, { "location": "dist/index.mjs", "line": 4303 }, { "location": "dist/index.mjs", "line": 4412 }, { "location": "src/routes/domain-verification.ts", "line": 8 }, { "location": "src/routes/domain-verification.ts", "line": 16 }, { "location": "src/routes/domain-verification.ts", "line": 17 }, { "location": "src/routes/providers.ts", "line": 13 }, { "location": "src/routes/providers.ts", "line": 633 }, { "location": "src/routes/providers.ts", "line": 634 }, { "location": "src/routes/providers.ts", "line": 1088 }, { "location": "src/routes/providers.ts", "line": 1089 }, { "location": "src/routes/schemas.ts", "line": 4 }, { "location": "src/routes/schemas.ts", "line": 8 }, { "location": "src/routes/schemas.ts", "line": 10 }, { "location": "src/routes/schemas.ts", "line": 36 }, { "location": "src/routes/schemas.ts", "line": 68 }, { "location": "src/routes/schemas.ts", "line": 70 }, { "location": "src/routes/schemas.ts", "line": 74 }, { "location": "src/routes/schemas.ts", "line": 81 }, { "location": "src/routes/schemas.ts", "line": 85 }, { "location": "src/routes/schemas.ts", "line": 91 }, { "location": "src/routes/schemas.ts", "line": 95 }, { "location": "src/routes/schemas.ts", "line": 97 }, { "location": "src/routes/schemas.ts", "line": 101 }, { "location": "src/routes/schemas.ts", "line": 105 }, { "location": "src/routes/schemas.ts", "line": 111 }, { "location": "src/routes/schemas.ts", "line": 117 }, { "location": "src/routes/schemas.ts", "line": 123 }, { "location": "src/routes/schemas.ts", "line": 127 }, { "location": "src/routes/schemas.ts", "line": 128 }, { "location": "src/routes/schemas.ts", "line": 134 }, { "location": "src/routes/schemas.ts", "line": 135 }, { "location": "src/routes/schemas.ts", "line": 136 }, { "location": "src/routes/schemas.ts", "line": 143 }, { "location": "src/routes/schemas.ts", "line": 148 }, { "location": "src/routes/schemas.ts", "line": 153 }, { "location": "src/routes/schemas.ts", "line": 158 }, { "location": "src/routes/schemas.ts", "line": 161 }, { "location": "src/routes/schemas.ts", "line": 162 }, { "location": "src/routes/schemas.ts", "line": 163 }, { "location": "src/routes/schemas.ts", "line": 168 }, { "location": "src/routes/schemas.ts", "line": 169 }, { "location": "src/routes/schemas.ts", "line": 176 }, { "location": "src/routes/schemas.ts", "line": 177 }, { "location": "src/routes/schemas.ts", "line": 183 }, { "location": "src/routes/schemas.ts", "line": 188 }, { "location": "src/routes/schemas.ts", "line": 192 }, { "location": "src/routes/schemas.ts", "line": 199 }, { "location": "src/routes/schemas.ts", "line": 200 }, { "location": "src/routes/schemas.ts", "line": 201 }, { "location": "src/routes/schemas.ts", "line": 202 }, { "location": "src/routes/schemas.ts", "line": 203 }, { "location": "src/routes/schemas.ts", "line": 204 }, { "location": "src/routes/schemas.ts", "line": 206 }, { "location": "src/routes/schemas.ts", "line": 207 }, { "location": "src/routes/schemas.ts", "line": 210 }, { "location": "src/routes/schemas.ts", "line": 218 }, { "location": "src/routes/schemas.ts", "line": 220 }, { "location": "src/routes/schemas.ts", "line": 221 }, { "location": "src/routes/schemas.ts", "line": 222 }, { "location": "src/routes/schemas.ts", "line": 228 }, { "location": "src/routes/schemas.ts", "line": 231 }, { "location": "src/routes/schemas.ts", "line": 232 }, { "location": "src/routes/schemas.ts", "line": 235 }, { "location": "src/routes/schemas.ts", "line": 236 }, { "location": "src/routes/schemas.ts", "line": 244 }, { "location": "src/routes/schemas.ts", "line": 245 }, { "location": "src/routes/schemas.ts", "line": 248 }, { "location": "src/routes/schemas.ts", "line": 249 }, { "location": "src/routes/schemas.ts", "line": 259 }, { "location": "src/routes/schemas.ts", "line": 260 }, { "location": "src/routes/schemas.ts", "line": 268 }, { "location": "src/routes/schemas.ts", "line": 270 }, { "location": "src/routes/schemas.ts", "line": 271 }, { "location": "src/routes/schemas.ts", "line": 272 }, { "location": "src/routes/schemas.ts", "line": 273 }, { "location": "src/routes/schemas.ts", "line": 274 }, { "location": "src/routes/schemas.ts", "line": 275 }, { "location": "src/routes/schemas.ts", "line": 276 }, { "location": "src/routes/schemas.ts", "line": 277 }, { "location": "src/routes/schemas.ts", "line": 280 }, { "location": "src/routes/schemas.ts", "line": 281 }, { "location": "src/routes/schemas.ts", "line": 282 }, { "location": "src/routes/schemas.ts", "line": 283 }, { "location": "src/routes/schemas.ts", "line": 284 }, { "location": "src/routes/schemas.ts", "line": 285 }, { "location": "src/routes/schemas.ts", "line": 289 }, { "location": "src/routes/schemas.ts", "line": 290 }, { "location": "src/routes/schemas.ts", "line": 294 }, { "location": "src/routes/schemas.ts", "line": 298 }, { "location": "src/routes/schemas.ts", "line": 304 }, { "location": "src/routes/schemas.ts", "line": 311 }, { "location": "src/routes/schemas.ts", "line": 327 }, { "location": "src/routes/schemas.ts", "line": 328 }, { "location": "src/routes/schemas.ts", "line": 329 }, { "location": "src/routes/schemas.ts", "line": 343 }, { "location": "src/routes/sso.ts", "line": 40 }, { "location": "src/routes/sso.ts", "line": 148 }, { "location": "src/routes/sso.ts", "line": 149 }, { "location": "src/routes/sso.ts", "line": 780 }, { "location": "src/routes/sso.ts", "line": 781 }, { "location": "src/routes/sso.ts", "line": 788 }, { "location": "src/routes/sso.ts", "line": 794 }, { "location": "src/routes/sso.ts", "line": 801 }, { "location": "src/routes/sso.ts", "line": 808 }, { "location": "src/routes/sso.ts", "line": 811 }, { "location": "src/routes/sso.ts", "line": 817 }, { "location": "src/routes/sso.ts", "line": 824 }, { "location": "src/routes/sso.ts", "line": 825 }, { "location": "src/routes/sso.ts", "line": 830 }, { "location": "src/routes/sso.ts", "line": 838 }, { "location": "src/routes/sso.ts", "line": 845 }, { "location": "src/routes/sso.ts", "line": 1259 }, { "location": "src/routes/sso.ts", "line": 1260 }, { "location": "src/routes/sso.ts", "line": 1261 }, { "location": "src/routes/sso.ts", "line": 1262 }, { "location": "src/routes/sso.ts", "line": 1263 }, { "location": "src/routes/sso.ts", "line": 2034 }, { "location": "src/routes/sso.ts", "line": 2035 }, { "location": "src/routes/sso.ts", "line": 2036 }, { "location": "src/routes/sso.ts", "line": 2045 }, { "location": "src/routes/sso.ts", "line": 2047 }, { "location": "src/routes/sso.ts", "line": 2179 }, { "location": "src/routes/sso.ts", "line": 2180 }, { "location": "src/routes/sso.ts", "line": 2181 }, { "location": "src/routes/sso.ts", "line": 2182 }, { "location": "src/routes/sso.ts", "line": 2183 }, { "location": "src/routes/sso.ts", "line": 2184 }, { "location": "src/routes/sso.ts", "line": 2452 }, { "location": "src/routes/sso.ts", "line": 2453 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 2 } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.23.1", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.23.1", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.23.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Rémi Berson" } ], "group": "", "name": "tldts", "version": "7.4.3", "description": "Library to work against complex domain names, subdomains and URIs.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tldts@7.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/remusao/tldts#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/remusao/tldts.git" } ], "type": "library", "bom-ref": "pkg:npm/tldts@7.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/tldts/package.json" }, { "name": "ImportedModules", "value": "tldts,getHostname,tldts/getHostname" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tldts/package.json" } ], "concludedValue": "node_modules/tldts/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 5 }, { "location": "dist/index.mjs", "line": 130 }, { "location": "src/utils.ts", "line": 2 }, { "location": "src/utils.ts", "line": 114 } ] } }, { "authors": [ { "name": "tngan" } ], "group": "", "name": "samlify", "version": "2.13.1", "description": "Node.js library for SAML SSO", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/samlify@2.13.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tngan/samlify" } ], "type": "library", "bom-ref": "pkg:npm/samlify@2.13.1", "properties": [ { "name": "SrcFile", "value": "node_modules/samlify/package.json" }, { "name": "ImportedModules", "value": "samlify,samlify/types/src/flow,FlowResult,samlify/types/src/flow/FlowResult,samlify/types/src/entity,BindingContext,samlify/types/src/entity/BindingContext,samlify/types/src/types,RequestInfo,samlify/types/src/types/RequestInfo" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/samlify/package.json" } ], "concludedValue": "node_modules/samlify/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 17 }, { "location": "src/routes/saml-pipeline.ts", "line": 11 }, { "location": "src/routes/sso.ts", "line": 38 }, { "location": "src/routes/sso.ts", "line": 39 }, { "location": "src/samlify.ts", "line": 1 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 4 } ] }, "tags": [ "saml" ] }, { "authors": [ { "name": "Jorge Poveda " } ], "group": "", "name": "oauth2-mock-server", "version": "9.0.0", "description": "Configurable OAuth2/OpenID Connect server for automated testing and development purposes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth2-mock-server@9.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/axa-group/oauth2-mock-server.git" } ], "type": "library", "bom-ref": "pkg:npm/oauth2-mock-server@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth2-mock-server/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth2-mock-server/package.json" } ], "concludedValue": "node_modules/oauth2-mock-server/package.json" } ] }, "tags": [ "connect" ] }, { "authors": [ { "name": "Sami Koskimäki " } ], "group": "", "name": "kysely", "version": "0.28.17", "description": "Type safe SQL query builder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kysely@0.28.17", "externalReferences": [ { "type": "website", "url": "https://kysely.dev" }, { "type": "vcs", "url": "git://github.com/kysely-org/kysely.git" } ], "type": "library", "bom-ref": "pkg:npm/kysely@0.28.17", "properties": [ { "name": "SrcFile", "value": "node_modules/kysely/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kysely/package.json" } ], "concludedValue": "node_modules/kysely/package.json" } ] }, "tags": [ "sql" ] }, { "authors": [ { "name": "Filip Skokan " } ], "group": "", "name": "jose", "version": "6.2.3", "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jose@6.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/panva/jose" } ], "type": "library", "bom-ref": "pkg:npm/jose@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jose/package.json" }, { "name": "ImportedModules", "value": "jose,createRemoteJWKSet,jose/createRemoteJWKSet,customFetch,jose/customFetch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jose/package.json" } ], "concludedValue": "node_modules/jose/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 13 }, { "location": "dist/index.mjs", "line": 581 }, { "location": "src/oidc/discovery.ts", "line": 18 }, { "location": "src/oidc/discovery.ts", "line": 434 } ] }, "tags": [ "security" ] }, { "authors": [ { "name": "Amit Gupta (https://solothought.com)" } ], "group": "", "name": "fast-xml-parser", "version": "5.8.0", "description": "Validate XML, Parse XML, Build XML without C/C++ based libraries", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-xml-parser@5.8.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/NaturalIntelligence/fast-xml-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-xml-parser@5.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-xml-parser/package.json" }, { "name": "ImportedModules", "value": "fast-xml-parser,XMLParser,fast-xml-parser/XMLParser,XMLValidator,fast-xml-parser/XMLValidator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-xml-parser/package.json" } ], "concludedValue": "node_modules/fast-xml-parser/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 3 }, { "location": "dist/index.mjs", "line": 4466 }, { "location": "src/index.ts", "line": 3 }, { "location": "src/index.ts", "line": 118 }, { "location": "src/routes/saml-pipeline.ts", "line": 10 }, { "location": "src/saml/parser.ts", "line": 1 } ] }, "tags": [ "parse", "xml" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "express", "version": "5.2.1", "description": "Fast, unopinionated, minimalist web framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/express@5.2.1", "externalReferences": [ { "type": "website", "url": "https://expressjs.com/" } ], "type": "framework", "bom-ref": "pkg:npm/express@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/express/package.json" } ], "concludedValue": "node_modules/express/package.json" } ] }, "tags": [ "framework", "web" ] }, { "group": "", "name": "body-parser", "version": "2.4.0", "description": "Node.js body parsing middleware", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/body-parser@2.4.0", "type": "library", "bom-ref": "pkg:npm/body-parser@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/package.json" } ], "concludedValue": "node_modules/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "better-call", "version": "1.4.4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/better-call@1.4.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/better-auth/better-call.git" } ], "type": "library", "bom-ref": "pkg:npm/better-call@1.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/better-call/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/better-call/package.json" } ], "concludedValue": "node_modules/better-call/package.json" } ] } }, { "group": "", "name": "better-auth", "version": "1.7.13", "description": "The most comprehensive authentication framework for TypeScript.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/better-auth@1.7.13", "externalReferences": [ { "type": "website", "url": "https://better-auth.com" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ], "type": "framework", "bom-ref": "pkg:npm/better-auth@1.7.13", "properties": [ { "name": "SrcFile", "value": "node_modules/better-auth/package.json" }, { "name": "ImportedModules", "value": "better-auth/api,APIError,better-auth/api/APIError,addOAuthServerContext,better-auth/api/addOAuthServerContext,createAuthEndpoint,better-auth/api/createAuthEndpoint,createAuthMiddleware,better-auth/api/createAuthMiddleware,getSessionFromCtx,better-auth/api/getSessionFromCtx,sessionMiddleware,better-auth/api/sessionMiddleware,better-auth/crypto,generateRandomString,better-auth/crypto/generateRandomString,better-auth/db,parseInputData,better-auth/db/parseInputData,toZodSchema,better-auth/db/toZodSchema,better-auth,HIDE_METADATA,better-auth/HIDE_METADATA,PRIVATE_KEY_JWT_SIGNING_ALGORITHMS,better-auth/PRIVATE_KEY_JWT_SIGNING_ALGORITHMS,authorizationCodeRequest,better-auth/authorizationCodeRequest,createAuthorizationURL,better-auth/createAuthorizationURL,createPrivateKeyJwtClientAssertionGetter,better-auth/createPrivateKeyJwtClientAssertionGetter,generateGenericState,better-auth/generateGenericState,generateState,better-auth/generateState,getOAuth2Tokens,better-auth/getOAuth2Tokens,parseGenericState,better-auth/parseGenericState,parseState,better-auth/parseState,better-auth/cookies,deleteSessionCookie,better-auth/cookies/deleteSessionCookie,setAccountCookie,better-auth/cookies/setAccountCookie,setSessionCookie,better-auth/cookies/setSessionCookie,better-auth/oauth2,additionalAuthorizationParamsSchema,better-auth/oauth2/additionalAuthorizationParamsSchema,handleOAuthUserInfo,better-auth/oauth2/handleOAuthUserInfo,better-auth/client,BetterAuthClientPlugin,better-auth/client/BetterAuthClientPlugin,DBFieldAttribute,better-auth/db/DBFieldAttribute,BetterAuthPlugin,better-auth/BetterAuthPlugin,GenericEndpointContext,better-auth/GenericEndpointContext,OAuth2Tokens,better-auth/OAuth2Tokens,User,better-auth/User,AuthContext,better-auth/AuthContext,PrivateKeyJwtSigningAlgorithm,better-auth/PrivateKeyJwtSigningAlgorithm,TokenEndpointAuth,better-auth/TokenEndpointAuth,StateData,better-auth/StateData,Awaitable,better-auth/Awaitable,DBTransactionAdapter,better-auth/DBTransactionAdapter,FieldAttributeToObject,better-auth/db/FieldAttributeToObject,InferAdditionalFieldsFromPluginOptions,better-auth/db/InferAdditionalFieldsFromPluginOptions,RemoveFieldsWithReturnedFalse,better-auth/db/RemoveFieldsWithReturnedFalse,DBAdapter,better-auth/DBAdapter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/better-auth/package.json" } ], "concludedValue": "node_modules/better-auth/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 2 }, { "location": "dist/index.mjs", "line": 1296 }, { "location": "dist/index.mjs", "line": 2239 }, { "location": "dist/index.mjs", "line": 2287 }, { "location": "dist/index.mjs", "line": 2371 }, { "location": "dist/index.mjs", "line": 2474 }, { "location": "dist/index.mjs", "line": 2547 }, { "location": "dist/index.mjs", "line": 2584 }, { "location": "dist/index.mjs", "line": 3173 }, { "location": "dist/index.mjs", "line": 3196 }, { "location": "dist/index.mjs", "line": 3570 }, { "location": "dist/index.mjs", "line": 3726 }, { "location": "dist/index.mjs", "line": 4155 }, { "location": "dist/index.mjs", "line": 4178 }, { "location": "dist/index.mjs", "line": 4190 }, { "location": "dist/index.mjs", "line": 4227 }, { "location": "dist/index.mjs", "line": 4251 }, { "location": "dist/index.mjs", "line": 4306 }, { "location": "dist/index.mjs", "line": 4315 }, { "location": "dist/index.mjs", "line": 4331 }, { "location": "dist/index.mjs", "line": 4352 }, { "location": "dist/index.mjs", "line": 4358 }, { "location": "dist/index.mjs", "line": 4381 }, { "location": "dist/index.mjs", "line": 4383 }, { "location": "dist/index.mjs", "line": 4402 }, { "location": "dist/index.mjs", "line": 4410 }, { "location": "dist/index.mjs", "line": 4416 }, { "location": "dist/index.mjs", "line": 4420 }, { "location": "dist/index.mjs", "line": 4422 }, { "location": "dist/index.mjs", "line": 4550 }, { "location": "dist/index.mjs", "line": 4552 }, { "location": "dist/index.mjs", "line": 4566 }, { "location": "src/index.ts", "line": 2 }, { "location": "src/index.ts", "line": 326 }, { "location": "src/index.ts", "line": 330 }, { "location": "src/index.ts", "line": 355 }, { "location": "src/oidc/errors.ts", "line": 8 }, { "location": "src/routes/domain-verification.ts", "line": 6 }, { "location": "src/routes/domain-verification.ts", "line": 61 }, { "location": "src/routes/domain-verification.ts", "line": 129 }, { "location": "src/routes/helpers.ts", "line": 2 }, { "location": "src/routes/providers.ts", "line": 12 }, { "location": "src/routes/providers.ts", "line": 553 }, { "location": "src/routes/providers.ts", "line": 679 }, { "location": "src/routes/providers.ts", "line": 823 }, { "location": "src/routes/providers.ts", "line": 1083 }, { "location": "src/routes/saml-pipeline.ts", "line": 7 }, { "location": "src/routes/schemas.ts", "line": 2 }, { "location": "src/routes/sso.ts", "line": 27 }, { "location": "src/routes/sso.ts", "line": 153 }, { "location": "src/routes/sso.ts", "line": 218 }, { "location": "src/routes/sso.ts", "line": 854 }, { "location": "src/routes/sso.ts", "line": 1140 }, { "location": "src/routes/sso.ts", "line": 1938 }, { "location": "src/routes/sso.ts", "line": 1963 }, { "location": "src/routes/sso.ts", "line": 1982 }, { "location": "src/routes/sso.ts", "line": 2040 }, { "location": "src/routes/sso.ts", "line": 2085 }, { "location": "src/routes/sso.ts", "line": 2188 }, { "location": "src/routes/sso.ts", "line": 2204 }, { "location": "src/routes/sso.ts", "line": 2239 }, { "location": "src/routes/sso.ts", "line": 2281 }, { "location": "src/routes/sso.ts", "line": 2299 }, { "location": "src/routes/sso.ts", "line": 2355 }, { "location": "src/routes/sso.ts", "line": 2358 }, { "location": "src/routes/sso.ts", "line": 2415 }, { "location": "src/routes/sso.ts", "line": 2448 }, { "location": "src/routes/sso.ts", "line": 2460 }, { "location": "src/routes/sso.ts", "line": 2475 }, { "location": "src/routes/sso.ts", "line": 2488 }, { "location": "src/saml/algorithms.ts", "line": 1 }, { "location": "src/saml/assertions.ts", "line": 4 }, { "location": "src/saml/cert.ts", "line": 7 }, { "location": "src/saml/cert.ts", "line": 39 }, { "location": "src/saml/response-binding.ts", "line": 3 }, { "location": "src/saml/timestamp.ts", "line": 1 }, { "location": "src/saml-state.ts", "line": 3 }, { "location": "src/user-resolution.ts", "line": 7 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 1 }, { "location": "dist/index.mjs", "line": 6 }, { "location": "dist/index.mjs", "line": 19 }, { "location": "dist/index.mjs", "line": 22 }, { "location": "dist/index.mjs", "line": 23 }, { "location": "dist/index.mjs", "line": 24 }, { "location": "dist/index.mjs", "line": 2670 }, { "location": "dist/index.mjs", "line": 2684 }, { "location": "dist/index.mjs", "line": 3727 }, { "location": "dist/index.mjs", "line": 3729 }, { "location": "dist/index.mjs", "line": 3819 }, { "location": "dist/index.mjs", "line": 3872 }, { "location": "dist/index.mjs", "line": 3875 }, { "location": "dist/index.mjs", "line": 3886 }, { "location": "dist/index.mjs", "line": 3901 }, { "location": "dist/index.mjs", "line": 4156 }, { "location": "dist/index.mjs", "line": 4158 }, { "location": "dist/index.mjs", "line": 4202 }, { "location": "src/client.ts", "line": 1 }, { "location": "src/client.ts", "line": 2 }, { "location": "src/index.ts", "line": 1 }, { "location": "src/linking/org-assignment.ts", "line": 1 }, { "location": "src/routes/domain-verification.ts", "line": 1 }, { "location": "src/routes/domain-verification.ts", "line": 7 }, { "location": "src/routes/providers.ts", "line": 7 }, { "location": "src/routes/saml-pipeline.ts", "line": 6 }, { "location": "src/routes/saml-pipeline.ts", "line": 8 }, { "location": "src/routes/saml-pipeline.ts", "line": 9 }, { "location": "src/routes/schemas.ts", "line": 3 }, { "location": "src/routes/sso.ts", "line": 10 }, { "location": "src/routes/sso.ts", "line": 20 }, { "location": "src/routes/sso.ts", "line": 32 }, { "location": "src/routes/sso.ts", "line": 33 }, { "location": "src/routes/sso.ts", "line": 37 }, { "location": "src/routes/sso.ts", "line": 1143 }, { "location": "src/routes/sso.ts", "line": 1149 }, { "location": "src/routes/sso.ts", "line": 1313 }, { "location": "src/routes/sso.ts", "line": 1442 }, { "location": "src/routes/sso.ts", "line": 1462 }, { "location": "src/routes/sso.ts", "line": 1493 }, { "location": "src/routes/sso.ts", "line": 1941 }, { "location": "src/routes/sso.ts", "line": 1947 }, { "location": "src/routes/sso.ts", "line": 1998 }, { "location": "src/saml-state.ts", "line": 1 }, { "location": "src/saml-state.ts", "line": 2 }, { "location": "src/saml-state.ts", "line": 4 }, { "location": "src/saml-state.ts", "line": 43 }, { "location": "src/saml-state.ts", "line": 66 }, { "location": "src/types.ts", "line": 6 }, { "location": "src/types.ts", "line": 12 }, { "location": "src/user-resolution.ts", "line": 6 }, { "location": "src/user-resolution.ts", "line": 8 }, { "location": "dist/client.d.mts", "line": 2 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 5 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 6 }, { "location": "dist/index.mjs", "line": 2573 }, { "location": "dist/index.mjs", "line": 2658 }, { "location": "dist/index.mjs", "line": 3537 }, { "location": "src/routes/domain-verification.ts", "line": 113 }, { "location": "src/routes/sso.ts", "line": 731 }, { "location": "src/saml-state.ts", "line": 25 }, { "location": "dist/index.mjs", "line": 1834 }, { "location": "dist/index.mjs", "line": 1848 }, { "location": "src/routes/schemas.ts", "line": 29 }, { "location": "src/routes/schemas.ts", "line": 62 }, { "location": "dist/index.mjs", "line": 3121 }, { "location": "dist/index.mjs", "line": 3122 }, { "location": "dist/index.mjs", "line": 4075 }, { "location": "dist/index.mjs", "line": 4076 }, { "location": "dist/index.mjs", "line": 4366 }, { "location": "dist/index.mjs", "line": 4404 }, { "location": "dist/index.mjs", "line": 4459 }, { "location": "src/routes/saml-pipeline.ts", "line": 840 }, { "location": "src/routes/saml-pipeline.ts", "line": 842 }, { "location": "src/routes/sso.ts", "line": 1830 }, { "location": "src/routes/sso.ts", "line": 1832 }, { "location": "src/routes/sso.ts", "line": 2325 }, { "location": "src/routes/sso.ts", "line": 2422 }, { "location": "src/routes/sso.ts", "line": 2564 }, { "location": "dist/index.mjs", "line": 3059 }, { "location": "dist/index.mjs", "line": 4005 }, { "location": "src/routes/saml-pipeline.ts", "line": 744 }, { "location": "src/routes/sso.ts", "line": 1732 } ] }, "tags": [ "framework" ] }, { "group": "@xmldom", "name": "xmldom", "version": "0.9.12", "description": "A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40xmldom/xmldom@0.9.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xmldom/xmldom" }, { "type": "vcs", "url": "git://github.com/xmldom/xmldom.git" } ], "type": "library", "bom-ref": "pkg:npm/@xmldom/xmldom@0.9.12", "properties": [ { "name": "SrcFile", "value": "node_modules/@xmldom/xmldom/package.json" }, { "name": "ImportedModules", "value": "@xmldom/xmldom,DOMParser,@xmldom/xmldom/DOMParser,Element,@xmldom/xmldom/Element" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@xmldom/xmldom/package.json" } ], "concludedValue": "node_modules/@xmldom/xmldom/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 16 }, { "location": "src/saml/assertions.ts", "line": 2 }, { "location": "src/saml/assertions.ts", "line": 3 }, { "location": "src/saml/response-binding.ts", "line": 1 }, { "location": "src/saml/response-binding.ts", "line": 2 } ] }, "tags": [ "xml" ] }, { "group": "@types", "name": "express", "version": "5.0.6", "description": "TypeScript definitions for express", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/express@5.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/express@5.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/express/package.json" } ], "concludedValue": "node_modules/@types/express/package.json" } ] } }, { "group": "@types", "name": "body-parser", "version": "1.19.6", "description": "TypeScript definitions for body-parser", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/body-parser@1.19.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/body-parser" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/body-parser@1.19.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/body-parser/package.json" } ], "concludedValue": "node_modules/@types/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "@better-fetch", "name": "fetch", "version": "1.3.3", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-fetch/fetch@1.3.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/better-auth/better-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/@better-fetch/fetch@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-fetch/fetch/package.json" }, { "name": "ImportedModules", "value": "@better-fetch/fetch,betterFetch,@better-fetch/fetch/betterFetch,BetterFetchOption,@better-fetch/fetch/BetterFetchOption" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-fetch/fetch/package.json" } ], "concludedValue": "node_modules/@better-fetch/fetch/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 12 }, { "location": "dist/index.mjs", "line": 548 }, { "location": "src/oidc/discovery.ts", "line": 16 }, { "location": "src/oidc/discovery.ts", "line": 17 }, { "location": "src/oidc/discovery.ts", "line": 359 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 3 } ] } }, { "authors": [ { "name": "Bereket Engida" } ], "group": "@better-auth", "name": "utils", "version": "0.5.0", "description": "A collection of utilities for better-auth", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-auth/utils@0.5.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/better-auth/utils.git" } ], "type": "library", "bom-ref": "pkg:npm/@better-auth/utils@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-auth/utils/package.json" }, { "name": "ImportedModules", "value": "@better-auth/utils/base64,base64,@better-auth/utils/base64/base64,base64Url,@better-auth/utils/base64/base64Url,@better-auth/utils/hash,createHash,@better-auth/utils/hash/createHash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-auth/utils/package.json" } ], "concludedValue": "node_modules/@better-auth/utils/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 14 }, { "location": "dist/index.mjs", "line": 928 }, { "location": "dist/index.mjs", "line": 1206 }, { "location": "src/provider-reference.ts", "line": 1 }, { "location": "src/provider-reference.ts", "line": 104 }, { "location": "src/saml/assertions.ts", "line": 1 }, { "location": "src/saml/assertions.ts", "line": 43 }, { "location": "dist/index.mjs", "line": 15 }, { "location": "dist/index.mjs", "line": 920 }, { "location": "src/provider-reference.ts", "line": 2 }, { "location": "src/provider-reference.ts", "line": 93 } ] } }, { "group": "@better-auth", "name": "kysely-adapter", "version": "1.7.13", "description": "Kysely adapter for Better Auth", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-auth/kysely-adapter@1.7.13", "externalReferences": [ { "type": "website", "url": "https://www.better-auth.com/docs/adapters/kysely" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ], "type": "library", "bom-ref": "pkg:npm/@better-auth/kysely-adapter@1.7.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-auth/kysely-adapter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-auth/kysely-adapter/package.json" } ], "concludedValue": "node_modules/@better-auth/kysely-adapter/package.json" } ] } }, { "group": "@better-auth", "name": "core", "version": "1.7.13", "description": "The most comprehensive authentication framework for TypeScript.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-auth/core@1.7.13", "externalReferences": [ { "type": "website", "url": "https://www.better-auth.com" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ], "type": "framework", "bom-ref": "pkg:npm/@better-auth/core@1.7.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-auth/core/package.json" }, { "name": "ImportedModules", "value": "@better-auth/core/context,getCurrentAdapter,@better-auth/core/context/getCurrentAdapter,getCurrentDBAdapterAsyncLocalStorage,@better-auth/core/context/getCurrentDBAdapterAsyncLocalStorage,runWithTransaction,@better-auth/core/context/runWithTransaction,@better-auth/core/utils/db,filterOutputFields,@better-auth/core/utils/db/filterOutputFields,@better-auth/core/oauth2/internal,verifyIdToken,@better-auth/core/oauth2/internal/verifyIdToken,@better-auth/core/utils/host,classifyHost,@better-auth/core/utils/host/classifyHost,isPublicRoutableHost,@better-auth/core/utils/host/isPublicRoutableHost,@better-auth/core/utils/error-codes,defineErrorCodes,@better-auth/core/utils/error-codes/defineErrorCodes,@better-auth/core/utils/is-api-error,isAPIError,@better-auth/core/utils/is-api-error/isAPIError,@better-auth/core/utils/url,appendQueryParams,@better-auth/core/utils/url/appendQueryParams,@better-auth/core/db/adapter,DBAdapter,@better-auth/core/db/adapter/DBAdapter,@better-auth/core/db,DBFieldAttribute,@better-auth/core/db/DBFieldAttribute,@better-auth/core,GenericEndpointContext,@better-auth/core/GenericEndpointContext" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-auth/core/package.json" } ], "concludedValue": "node_modules/@better-auth/core/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 8 }, { "location": "dist/index.mjs", "line": 2068 }, { "location": "dist/index.mjs", "line": 2392 }, { "location": "dist/index.mjs", "line": 2393 }, { "location": "dist/index.mjs", "line": 2492 }, { "location": "dist/index.mjs", "line": 2493 }, { "location": "dist/index.mjs", "line": 3040 }, { "location": "dist/index.mjs", "line": 3042 }, { "location": "dist/index.mjs", "line": 3054 }, { "location": "dist/index.mjs", "line": 3985 }, { "location": "dist/index.mjs", "line": 3987 }, { "location": "dist/index.mjs", "line": 4000 }, { "location": "src/routes/providers.ts", "line": 4 }, { "location": "src/routes/providers.ts", "line": 275 }, { "location": "src/routes/providers.ts", "line": 877 }, { "location": "src/routes/providers.ts", "line": 880 }, { "location": "src/routes/providers.ts", "line": 1119 }, { "location": "src/routes/providers.ts", "line": 1120 }, { "location": "src/routes/saml-pipeline.ts", "line": 4 }, { "location": "src/routes/saml-pipeline.ts", "line": 699 }, { "location": "src/routes/saml-pipeline.ts", "line": 706 }, { "location": "src/routes/saml-pipeline.ts", "line": 732 }, { "location": "src/routes/sso.ts", "line": 4 }, { "location": "src/routes/sso.ts", "line": 1685 }, { "location": "src/routes/sso.ts", "line": 1693 }, { "location": "src/routes/sso.ts", "line": 1720 }, { "location": "src/user-resolution.ts", "line": 1 }, { "location": "dist/index.mjs", "line": 9 }, { "location": "dist/index.mjs", "line": 2134 }, { "location": "src/routes/providers.ts", "line": 6 }, { "location": "src/routes/providers.ts", "line": 384 }, { "location": "dist/index.mjs", "line": 10 }, { "location": "dist/index.mjs", "line": 582 }, { "location": "src/oidc/discovery.ts", "line": 11 }, { "location": "src/oidc/discovery.ts", "line": 438 }, { "location": "dist/index.mjs", "line": 11 }, { "location": "dist/index.mjs", "line": 424 }, { "location": "dist/index.mjs", "line": 482 }, { "location": "dist/index.mjs", "line": 495 }, { "location": "src/oidc/discovery.ts", "line": 15 }, { "location": "src/oidc/discovery.ts", "line": 181 }, { "location": "src/oidc/discovery.ts", "line": 260 }, { "location": "src/oidc/discovery.ts", "line": 279 }, { "location": "dist/index.mjs", "line": 18 }, { "location": "dist/index.mjs", "line": 1259 }, { "location": "src/saml/error-codes.ts", "line": 1 }, { "location": "src/saml/error-codes.ts", "line": 3 }, { "location": "dist/index.mjs", "line": 20 }, { "location": "dist/index.mjs", "line": 2917 }, { "location": "dist/index.mjs", "line": 3095 }, { "location": "dist/index.mjs", "line": 3903 }, { "location": "dist/index.mjs", "line": 4050 }, { "location": "src/routes/saml-pipeline.ts", "line": 5 }, { "location": "src/routes/saml-pipeline.ts", "line": 461 }, { "location": "src/routes/saml-pipeline.ts", "line": 789 }, { "location": "src/routes/sso.ts", "line": 5 }, { "location": "src/routes/sso.ts", "line": 1495 }, { "location": "src/routes/sso.ts", "line": 1791 }, { "location": "dist/index.mjs", "line": 21 }, { "location": "dist/index.mjs", "line": 3823 }, { "location": "dist/index.mjs", "line": 3832 }, { "location": "dist/index.mjs", "line": 4206 }, { "location": "dist/index.mjs", "line": 4216 }, { "location": "dist/index.mjs", "line": 4254 }, { "location": "dist/index.mjs", "line": 4327 }, { "location": "src/routes/sso.ts", "line": 6 }, { "location": "src/routes/sso.ts", "line": 1320 }, { "location": "src/routes/sso.ts", "line": 1334 }, { "location": "src/routes/sso.ts", "line": 2004 }, { "location": "src/routes/sso.ts", "line": 2018 }, { "location": "src/routes/sso.ts", "line": 2090 }, { "location": "src/routes/sso.ts", "line": 2228 }, { "location": "src/routes/helpers.ts", "line": 1 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 7 }, { "location": "src/routes/providers.ts", "line": 5 }, { "location": "src/routes/schemas.ts", "line": 1 }, { "location": "src/saml/response-validation.ts", "line": 1 }, { "location": "dist/index-BvKzNnKP.d.mts", "line": 8 } ] }, "tags": [ "framework" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@better-auth/sso@1.7.13" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-01T14:50:14Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, November 1, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'sso' with version '1.7.13'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 19 source files." } ] }