{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:456c65d9-4d25-4ca0-8ef5-2e3faa8aa643", "version": 1, "metadata": { "timestamp": "2026-11-08T02:21:23Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "buf", "group": "@bufbuild", "version": "1.74.0", "description": "The buf CLI is a tool for working with Protocol Buffers.", "purl": "pkg:npm/%40bufbuild/buf@1.74.0", "bom-ref": "pkg:npm/@bufbuild/buf@1.74.0", "properties": [ { "name": "cdx:npm:bin", "value": "buf, protoc-gen-buf-breaking, protoc-gen-buf-lint" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "prepack, postinstall" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "postinstall" }, { "name": "cdx:npm:lifecycleIndicatorMap", "value": "postinstall:ast:child-process-import" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@bufbuild\\n@esbuild\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@bufbuild", "name": "buf-darwin-arm64", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e3de1a67b21266b6a4f4e2446b5d1fe24ddec5347f5f3b159ca054a041ac4c5d998a18eff85825e45dd928bec8085e15c0e8180141168a5898db2a3f853b8b1b" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-darwin-arm64@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-darwin-arm64/-/buf-darwin-arm64-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-darwin-arm64@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-darwin-arm64/-/buf-darwin-arm64-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bufbuild", "name": "buf-darwin-x64", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1f3ba191e99ce0e2dd9bff4ac935f7987974d0753eb658995e08ce634d7b38b880c5068e1bc8d184d0e035e0d5b09932a2fc6d73d39e530c9d84ca731aaf6116" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-darwin-x64@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-darwin-x64/-/buf-darwin-x64-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-darwin-x64@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-darwin-x64/-/buf-darwin-x64-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bufbuild", "name": "buf-linux-aarch64", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d9a11d0bcaffb2c894190a6ad3d2485235157325fbb1c3d3e11ba7e0d7448d95add4c044c6d9674ae227215922ad85a7dd63924a4252aa32677cd7b82143599e" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-linux-aarch64@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-linux-aarch64/-/buf-linux-aarch64-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-linux-aarch64@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-linux-aarch64/-/buf-linux-aarch64-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bufbuild", "name": "buf-linux-armv7", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fab17b0d8713b1a3797d8e3aa2e56f56f28d2cb77f15566dcd1684b806c85f1838c3f264578f1b5ccc8fcd73db7d4e846a25e219266a9d5169704d98052b9d1c" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-linux-armv7@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-linux-armv7/-/buf-linux-armv7-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-linux-armv7@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-linux-armv7/-/buf-linux-armv7-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bufbuild", "name": "buf-linux-x64", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "17656a86c59c6ec396f5a1daa0a8a8d28d00e57d982f007a9fd266fdf225b1d5d1a0bb245bda76a756d3590a00c57ab45bc88fa573316457f58e1336b9343ec3" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-linux-x64@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-linux-x64/-/buf-linux-x64-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-linux-x64@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-linux-x64/-/buf-linux-x64-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bufbuild", "name": "buf-win32-arm64", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7d30872f771c2528e5b6d1fe5684c0ad49dc7100ab3aec43d07912004aac7015f6d9fe3faf0bcceef172b96e55932630339ee1e52ddf3e527a0a99b6189164f7" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-win32-arm64@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-win32-arm64/-/buf-win32-arm64-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-win32-arm64@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-win32-arm64/-/buf-win32-arm64-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@bufbuild", "name": "buf-win32-x64", "version": "1.74.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8946be99b277b182c4e791d8c5f0a4495ad4f26c4bc782060ef6f92246ebc4afb3fb7160e1245342e1ea9e77fe194a6562cf3fd547c6f0348c77873b833fade6" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bufbuild/buf-win32-x64@1.74.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@bufbuild/buf-win32-x64/-/buf-win32-x64-1.74.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@bufbuild/buf-win32-x64@1.74.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@bufbuild/buf-win32-x64/-/buf-win32-x64-1.74.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "node", "version": "18.11.18", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "0c74295868f240a4878f779b8c523fc1129ca9071d47e328141ca09ed60e672b42a8d7e4776642e004432760d0aa18c7e69f393677778e1509217aeccc55ff24" } ], "purl": "pkg:npm/%40types/node@18.11.18", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-18.11.18.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@18.11.18", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-18.11.18.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/node" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esbuild", "version": "0.28.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "1eb26bbd9bf96b2c41ccf7f0a613a837393338822589fce4d0a26b18ad9cf11e3e2caa4cb6960b41e51d8e7c235affcb665907da569993ee30efca62f7d0f857" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esbuild@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packaging/npm/buf/node_modules/.bin/esbuild" }, { "name": "cdx:npm:bin", "value": "esbuild" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "ImportedModules", "value": "esbuild" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "prepack.js", "line": 19 } ] } }, { "group": "@esbuild", "name": "aix-ppc64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4af97bb6af24ff4f3ea7a0973e94634357ca5fed68747fc141b6f8f1f57a7e3dc258786ca083a863cef0d681d79b4a84a6420add97d5829d2179ddd7057cd731" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/aix-ppc64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/aix-ppc64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "android-arm", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d24d85d76f57762a354dd25fcc9f2ccb5438eef503d8d9f07618807fb76b50dd440537cf7f886c142b66320bbfea6f094b3b01ae59958ee74c050a8e7c6f2eb1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/android-arm@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/android-arm@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "android-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "df810611b088020a2c633ea0a0b728a57e8ca3b3721aff6d7f010cdbfec27b655c551939ebc892be788659c517232ef0103475c33a2573172b88556b59873006" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/android-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/android-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "android-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "75bc18ee5b523035ac45ab5c4690a7112e05fa29bcf0e094806663cb9dac842ec6a87444fdc625c4d6c1e19e14a49b30a5c738431776a04fee7ccd29eb520a9e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/android-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/android-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "darwin-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4d96d691063b92f4c05db5d44fbb9500247970c1ec0e24b3f73ed92805ff453abf589124dd0c91af4c19a4d8410d7fbfd02b5da9420994e8a875072d6bab58dd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/darwin-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/darwin-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "darwin-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cdf77380af400813592c8fc2c874cec7cd52c8d6cce985e7eebc52817f7b563ca23e5f56d62e0a6b87e0284084a0508a1a9bc18f9a80ad62068108cec2482c91" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/darwin-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/darwin-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "freebsd-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c06d8403c10d744234aa191264c8dfaab758fb38826023cc9ad6638c8c0e9971639b2cc41e7f94531939a1ff9262c8ed7ecdd5a67942ed02f3488e6163face03" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/freebsd-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "freebsd-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8bb759f6f4209ef482ce2feb6025cd82d17f53e78a64d241ceedde4d06d18079cceed3528b32ce911140977ab355cfcea7fbb96241c76b8a5fff70ce607b612d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/freebsd-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/freebsd-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-arm", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a955c1387412f9de58ef6d86c09cc952d38b957ee49b70ab68e686a2b985d690ed3ddd82fe5d521d13e08cbba72c67b9d5287961858a3050f25784b180c4184d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-arm@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-arm@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c87b3ed2e73cfa7bc401f01fc6b59028ae6979237305ce0f7a070c3b4109da14fbd6e03bbc1f08860d9eefb4763fb486e6e6233db1e52cb9af7b82cb2d109fd2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-ia32", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "775cf866e3f46a3adfcff161193e2fbf6efcad7f0a9cf3c9c7c8b9f80b4aed361bc7d2def45d61cb3bab669904ca39066bd7541a1428c380b5366786beac4ddb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-ia32@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-ia32@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-loong64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "339b118d4559ae49b53803d1ddd94e63336637e96864a1958b5554406af0baa2dc6d1eaa780cfe7da98c863012787dd854abd9cfecd3d63961fe4782dd18ff96" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-loong64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-loong64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-mips64el", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "99139b0597878763b170114f584fc58f296446065d62e893477bda4e8ceab8218e1f5e223fda0de31e067bcd42a080d842b5e6231a45ba6241bb932d6699d025" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-mips64el@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-mips64el@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-ppc64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b2549c06c3006f71850dc76b0a02f066d3d84681f61ffca8bafd744226724639ac3f8f1fce7a2f796cad4a0088fd1d19714829734661214131e8b1edb3ccab7d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-ppc64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-ppc64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-riscv64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "930d28c24d68d061444d42725b48dcd06e18cecd011d99f424367c2514f4f3cbe32585fbefb040b357c31b1002faaf37d6a3acd834c2f7a98db06da8a5d7f2c9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-riscv64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-riscv64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-s390x", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fe50088d7f1a605441ca187a2f9ad8b4f10346a6bd75eff857f8ee39772d6b97eb8efcd73b8feca84b72cadb1ed20df3645b96bb97033743242f3daa4430f602" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-s390x@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-s390x@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "linux-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bbf6a73581769a654e103c0bb67435c0eaf7119f6c4cd18b5abb18198c075b3180dd28bce083a41d795b5930f5341fbdff595c9f079828ee78ba1c59c9d3737c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "netbsd-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a24b340d86cbc1632669a913b026feccbe04f9a1d154ba26f48259380b6131010f8909b27571e4ce2604b06611c74b8d57f22310a18057de352731f4da97e5ab" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/netbsd-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "netbsd-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "69e2fa9409cdf3d1f3e373258751bc0116ac6eea18bd22130c4c74b478796fb8c99c772cb2a823cbd631e37d060e99826ba3b2acaa12d1a3518caba77518b31a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/netbsd-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/netbsd-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "openbsd-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3041497b90b747ca705dd679636d68a3a9bb78f892d1df695ae727f7d3bfc2fc896428682102ab403c4aac6796f05e7e4f4a244c77ac0260de8870d322ad15fd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/openbsd-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "openbsd-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8bf64b20e69f13467c708fd700d2408b1a092ffb910284b6c4e037adbd3137e28ad0ad7bedc300b10624cc7b41aed31700ab8073b1c681c5a267fb110b537183" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/openbsd-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/openbsd-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "openharmony-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "81ef99ec45c536dd813b5a0032c569890f04c27755f62d715deac079320aec0b4fb376ca15740cee7951c4348850831eb9e47508d5f1ab3b4bcdd35e45e28126" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/openharmony-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "sunos-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0448e0b440a42f7bd8f9269243a9f355f8802d4785c696b0ca9f0999fe4fb5885fd54838d0dd61fe1c6586db3e7f516f4af6ab12281dc52dc1952308d8f24b71" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/sunos-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/sunos-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "win32-arm64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "942bfd78afc7e992566c4edb8769f0e78099f4cda7ba907125c4ec764fd04275a47528ca1aec66987f3f196ae54f578c9997e7e1d19c0a346d7b7f7b5aa7d05c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/win32-arm64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/win32-arm64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "win32-ia32", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cef6ff981d9b482a093a9a0206060a2a95fa60cea624194151552d563e350e564954407aff408a9516313f9c169750b520b882a00539c19678ab53f7a9e4ba12" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/win32-ia32@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/win32-ia32@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@esbuild", "name": "win32-x64", "version": "0.28.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6e6e0ca30aeff865cc969597fbe11c5f0fe22f2775a37f9b2640b60e4597615be0642a83fdb4a3f5cb59780302ddc2318234554760ee7da8aee183f1af9816d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/win32-x64@0.28.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/win32-x64@0.28.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "4.9.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d455e4f44d879be433650ef3f8c7098872f8356d45d84cccbbd36af62df301a1aa89b69fa98c02554e96c9602ec90451cce971a2ef31652c972c437ca0a8f6e2" } ], "purl": "pkg:npm/typescript@4.9.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@4.9.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packaging/npm/buf/node_modules/.bin/tsc, /app/packaging/npm/buf/node_modules/.bin/tsserver" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@bufbuild/buf-darwin-arm64@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf-darwin-x64@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf-linux-aarch64@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf-linux-armv7@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf-linux-x64@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf-win32-arm64@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf-win32-x64@1.74.0", "dependsOn": [] }, { "ref": "pkg:npm/@types/node@18.11.18", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/aix-ppc64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/android-arm@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/android-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/android-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/darwin-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/darwin-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/freebsd-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/freebsd-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-arm@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-ia32@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-loong64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-mips64el@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-ppc64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-riscv64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-s390x@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/linux-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/netbsd-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/netbsd-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/openbsd-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/openbsd-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/openharmony-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/sunos-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/win32-arm64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/win32-ia32@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/@esbuild/win32-x64@0.28.1", "dependsOn": [] }, { "ref": "pkg:npm/esbuild@0.28.1", "dependsOn": [ "pkg:npm/@esbuild/aix-ppc64@0.28.1", "pkg:npm/@esbuild/android-arm64@0.28.1", "pkg:npm/@esbuild/android-arm@0.28.1", "pkg:npm/@esbuild/android-x64@0.28.1", "pkg:npm/@esbuild/darwin-arm64@0.28.1", "pkg:npm/@esbuild/darwin-x64@0.28.1", "pkg:npm/@esbuild/freebsd-arm64@0.28.1", "pkg:npm/@esbuild/freebsd-x64@0.28.1", "pkg:npm/@esbuild/linux-arm64@0.28.1", "pkg:npm/@esbuild/linux-arm@0.28.1", "pkg:npm/@esbuild/linux-ia32@0.28.1", "pkg:npm/@esbuild/linux-loong64@0.28.1", "pkg:npm/@esbuild/linux-mips64el@0.28.1", "pkg:npm/@esbuild/linux-ppc64@0.28.1", "pkg:npm/@esbuild/linux-riscv64@0.28.1", "pkg:npm/@esbuild/linux-s390x@0.28.1", "pkg:npm/@esbuild/linux-x64@0.28.1", "pkg:npm/@esbuild/netbsd-arm64@0.28.1", "pkg:npm/@esbuild/netbsd-x64@0.28.1", "pkg:npm/@esbuild/openbsd-arm64@0.28.1", "pkg:npm/@esbuild/openbsd-x64@0.28.1", "pkg:npm/@esbuild/openharmony-arm64@0.28.1", "pkg:npm/@esbuild/sunos-x64@0.28.1", "pkg:npm/@esbuild/win32-arm64@0.28.1", "pkg:npm/@esbuild/win32-ia32@0.28.1", "pkg:npm/@esbuild/win32-x64@0.28.1" ] }, { "ref": "pkg:npm/typescript@4.9.5", "dependsOn": [] }, { "ref": "pkg:npm/@bufbuild/buf@1.74.0", "dependsOn": [ "pkg:npm/@bufbuild/buf-darwin-arm64@1.74.0", "pkg:npm/@bufbuild/buf-darwin-x64@1.74.0", "pkg:npm/@bufbuild/buf-linux-aarch64@1.74.0", "pkg:npm/@bufbuild/buf-linux-armv7@1.74.0", "pkg:npm/@bufbuild/buf-linux-x64@1.74.0", "pkg:npm/@bufbuild/buf-win32-arm64@1.74.0", "pkg:npm/@bufbuild/buf-win32-x64@1.74.0", "pkg:npm/@types/node@18.11.18", "pkg:npm/esbuild@0.28.1", "pkg:npm/typescript@4.9.5" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@bufbuild/buf@1.74.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-08T02:21:23Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, November 8, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'buf' with version '1.74.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }