{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:8f4c7f44-eb43-4ffc-8632-12e16c1f7683",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-09T16:17:39Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "ckeditor5-ui",
      "group": "@ckeditor",
      "version": "41.4.2",
      "description": "The UI framework and standard UI library of CKEditor 5.",
      "purl": "pkg:npm/%40ckeditor/ckeditor5-ui@41.4.2",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-ui@41.4.2",
      "author": "CKSource (http://cksource.com/)",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://ckeditor.com/ckeditor-5"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ckeditor/ckeditor5.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ckeditor"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@ckeditor",
      "name": "ckeditor5-core",
      "version": "41.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9022098ef8a230d20c04cc7b5c55c5a7521e4c42d02afef1c8f2625450f251fb487ed85ff6e5adcbbda2a59dc104d0460646a84e24b30d9e74ec4b17e9ccee21"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-core@41.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-core/-/ckeditor5-core-41.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-core@41.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-core/-/ckeditor5-core-41.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@ckeditor/ckeditor5-core/dist/index.js,Plugin,@ckeditor/ckeditor5-core/dist/index.js/Plugin,icons,@ckeditor/ckeditor5-core/dist/index.js/icons,ContextPlugin,@ckeditor/ckeditor5-core/dist/index.js/ContextPlugin,@ckeditor/ckeditor5-core,@ckeditor/ckeditor5-core/icons,@ckeditor/ckeditor5-core/Plugin,@ckeditor/ckeditor5-core/ContextPlugin"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 7
          },
          {
            "location": "src/colorselector/colorgridsfragmentview.js",
            "line": 15
          },
          {
            "location": "src/colorselector/colorpickerfragmentview.js",
            "line": 11
          },
          {
            "location": "src/dialog/dialog.js",
            "line": 5
          },
          {
            "location": "src/dialog/dialogview.js",
            "line": 9
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelp.js",
            "line": 8
          },
          {
            "location": "src/notification/notification.js",
            "line": 9
          },
          {
            "location": "src/panel/balloon/contextualballoon.js",
            "line": 11
          },
          {
            "location": "src/search/text/searchtextqueryview.js",
            "line": 12
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 12
          },
          {
            "location": "src/toolbar/block/blocktoolbar.js",
            "line": 9
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 16
          }
        ]
      }
    },
    {
      "group": "@ckeditor",
      "name": "ckeditor5-engine",
      "version": "41.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db926a233358bc2a90e9fd36618f9af00f31b630a5cc8d180a2a34246a111b7247257cd8b106d33ec8a892e135042c0c0aede0628173f1e28962ddac7a52ec0b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-engine@41.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-engine/-/ckeditor5-engine-41.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-engine@41.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-engine/-/ckeditor5-engine-41.4.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@ckeditor",
      "name": "ckeditor5-utils",
      "version": "41.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5602ebd9e2d5820ca10ea6bb1fc254c699ce2d367447f62e0d9e8435552e99df6ae15ae936cf7864ad18fd2869ed49ae1d0fec4ed87e3d64ec8beb792b062a79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-utils@41.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-41.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-41.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@ckeditor/ckeditor5-utils/dist/index.js,Collection,@ckeditor/ckeditor5-utils/dist/index.js/Collection,CKEditorError,@ckeditor/ckeditor5-utils/dist/index.js/CKEditorError,EmitterMixin,@ckeditor/ckeditor5-utils/dist/index.js/EmitterMixin,isNode,@ckeditor/ckeditor5-utils/dist/index.js/isNode,toArray,@ckeditor/ckeditor5-utils/dist/index.js/toArray,DomEmitterMixin,@ckeditor/ckeditor5-utils/dist/index.js/DomEmitterMixin,ObservableMixin,@ckeditor/ckeditor5-utils/dist/index.js/ObservableMixin,isIterable,@ckeditor/ckeditor5-utils/dist/index.js/isIterable,@ckeditor/ckeditor5-utils/dist/index.js/uid,createElement,@ckeditor/ckeditor5-utils/dist/index.js/createElement,@ckeditor/ckeditor5-utils/dist/index.js/env,getEnvKeystrokeText,@ckeditor/ckeditor5-utils/dist/index.js/getEnvKeystrokeText,delay,@ckeditor/ckeditor5-utils/dist/index.js/delay,FocusTracker,@ckeditor/ckeditor5-utils/dist/index.js/FocusTracker,KeystrokeHandler,@ckeditor/ckeditor5-utils/dist/index.js/KeystrokeHandler,global,@ckeditor/ckeditor5-utils/dist/index.js/global,isVisible,@ckeditor/ckeditor5-utils/dist/index.js/isVisible,ResizeObserver,@ckeditor/ckeditor5-utils/dist/index.js/ResizeObserver,getBorderWidths,@ckeditor/ckeditor5-utils/dist/index.js/getBorderWidths,Rect,@ckeditor/ckeditor5-utils/dist/index.js/Rect,toUnit,@ckeditor/ckeditor5-utils/dist/index.js/toUnit,logWarning,@ckeditor/ckeditor5-utils/dist/index.js/logWarning,getOptimalPosition,@ckeditor/ckeditor5-utils/dist/index.js/getOptimalPosition,priorities,@ckeditor/ckeditor5-utils/dist/index.js/priorities,isRange,@ckeditor/ckeditor5-utils/dist/index.js/isRange,first,@ckeditor/ckeditor5-utils/dist/index.js/first,verifyLicense,@ckeditor/ckeditor5-utils/dist/index.js/verifyLicense,@ckeditor/ckeditor5-utils,@ckeditor/ckeditor5-utils/getOptimalPosition,@ckeditor/ckeditor5-utils/global,@ckeditor/ckeditor5-utils/toUnit,@ckeditor/ckeditor5-utils/Rect,@ckeditor/ckeditor5-utils/env,@ckeditor/ckeditor5-utils/getEnvKeystrokeText,@ckeditor/ckeditor5-utils/uid,@ckeditor/ckeditor5-utils/delay,@ckeditor/ckeditor5-utils/FocusTracker,@ckeditor/ckeditor5-utils/KeystrokeHandler,@ckeditor/ckeditor5-utils/Collection,@ckeditor/ckeditor5-utils/ObservableMixin,@ckeditor/ckeditor5-utils/CKEditorError,@ckeditor/ckeditor5-utils/logWarning,@ckeditor/ckeditor5-utils/priorities,@ckeditor/ckeditor5-utils/createElement,@ckeditor/ckeditor5-utils/isVisible,@ckeditor/ckeditor5-utils/DomEmitterMixin,@ckeditor/ckeditor5-utils/verifyLicense,@ckeditor/ckeditor5-utils/EmitterMixin,@ckeditor/ckeditor5-utils/isRange,@ckeditor/ckeditor5-utils/isNode,@ckeditor/ckeditor5-utils/toArray,@ckeditor/ckeditor5-utils/getBorderWidths,@ckeditor/ckeditor5-utils/ResizeObserver,@ckeditor/ckeditor5-utils/first,@ckeditor/ckeditor5-utils/isIterable"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 5
          },
          {
            "location": "dist/index.js",
            "line": 164
          },
          {
            "location": "dist/index.js",
            "line": 664
          },
          {
            "location": "dist/index.js",
            "line": 1050
          },
          {
            "location": "dist/index.js",
            "line": 1089
          },
          {
            "location": "dist/index.js",
            "line": 1162
          },
          {
            "location": "dist/index.js",
            "line": 1183
          },
          {
            "location": "dist/index.js",
            "line": 1312
          },
          {
            "location": "dist/index.js",
            "line": 1459
          },
          {
            "location": "dist/index.js",
            "line": 1476
          },
          {
            "location": "dist/index.js",
            "line": 1937
          },
          {
            "location": "dist/index.js",
            "line": 1970
          },
          {
            "location": "dist/index.js",
            "line": 1976
          },
          {
            "location": "dist/index.js",
            "line": 1978
          },
          {
            "location": "dist/index.js",
            "line": 1986
          },
          {
            "location": "dist/index.js",
            "line": 1989
          },
          {
            "location": "dist/index.js",
            "line": 1997
          },
          {
            "location": "dist/index.js",
            "line": 1998
          },
          {
            "location": "dist/index.js",
            "line": 2030
          },
          {
            "location": "dist/index.js",
            "line": 2038
          },
          {
            "location": "dist/index.js",
            "line": 2132
          },
          {
            "location": "dist/index.js",
            "line": 2189
          },
          {
            "location": "dist/index.js",
            "line": 2447
          },
          {
            "location": "dist/index.js",
            "line": 2468
          },
          {
            "location": "dist/index.js",
            "line": 2491
          },
          {
            "location": "dist/index.js",
            "line": 2564
          },
          {
            "location": "dist/index.js",
            "line": 3149
          },
          {
            "location": "dist/index.js",
            "line": 3150
          },
          {
            "location": "dist/index.js",
            "line": 3367
          },
          {
            "location": "dist/index.js",
            "line": 3423
          },
          {
            "location": "dist/index.js",
            "line": 3467
          },
          {
            "location": "dist/index.js",
            "line": 3531
          },
          {
            "location": "dist/index.js",
            "line": 3999
          },
          {
            "location": "dist/index.js",
            "line": 4186
          },
          {
            "location": "dist/index.js",
            "line": 4440
          },
          {
            "location": "dist/index.js",
            "line": 4466
          },
          {
            "location": "dist/index.js",
            "line": 4541
          },
          {
            "location": "dist/index.js",
            "line": 4740
          },
          {
            "location": "dist/index.js",
            "line": 5636
          },
          {
            "location": "dist/index.js",
            "line": 6248
          },
          {
            "location": "dist/index.js",
            "line": 7280
          },
          {
            "location": "dist/index.js",
            "line": 7953
          },
          {
            "location": "dist/index.js",
            "line": 8667
          },
          {
            "location": "dist/index.js",
            "line": 9054
          },
          {
            "location": "dist/index.js",
            "line": 9217
          },
          {
            "location": "dist/index.js",
            "line": 9229
          },
          {
            "location": "dist/index.js",
            "line": 9279
          },
          {
            "location": "dist/index.js",
            "line": 9424
          },
          {
            "location": "dist/index.js",
            "line": 9443
          },
          {
            "location": "dist/index.js",
            "line": 9810
          },
          {
            "location": "dist/index.js",
            "line": 10068
          },
          {
            "location": "dist/index.js",
            "line": 10100
          },
          {
            "location": "dist/index.js",
            "line": 10171
          },
          {
            "location": "dist/index.js",
            "line": 10601
          },
          {
            "location": "dist/index.js",
            "line": 10620
          },
          {
            "location": "dist/index.js",
            "line": 11126
          },
          {
            "location": "dist/index.js",
            "line": 11689
          },
          {
            "location": "dist/index.js",
            "line": 11911
          },
          {
            "location": "dist/index.js",
            "line": 12058
          },
          {
            "location": "dist/index.js",
            "line": 12179
          },
          {
            "location": "dist/index.js",
            "line": 12203
          },
          {
            "location": "dist/index.js",
            "line": 13496
          },
          {
            "location": "dist/index.js",
            "line": 13586
          },
          {
            "location": "dist/index.js",
            "line": 13660
          },
          {
            "location": "dist/index.js",
            "line": 13738
          },
          {
            "location": "dist/index.js",
            "line": 14259
          },
          {
            "location": "src/autocomplete/autocompleteview.js",
            "line": 8
          },
          {
            "location": "src/autocomplete/autocompleteview.js",
            "line": 23
          },
          {
            "location": "src/bindings/draggableviewmixin.js",
            "line": 5
          },
          {
            "location": "src/button/buttonview.js",
            "line": 11
          },
          {
            "location": "src/button/buttonview.js",
            "line": 46
          },
          {
            "location": "src/button/buttonview.js",
            "line": 120
          },
          {
            "location": "src/button/buttonview.js",
            "line": 183
          },
          {
            "location": "src/button/buttonview.js",
            "line": 206
          },
          {
            "location": "src/colorgrid/colorgridview.js",
            "line": 11
          },
          {
            "location": "src/colorgrid/colortileview.js",
            "line": 9
          },
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 9
          },
          {
            "location": "src/colorselector/colorselectorview.js",
            "line": 11
          },
          {
            "location": "src/colorselector/documentcolorcollection.js",
            "line": 5
          },
          {
            "location": "src/colorselector/documentcolorcollection.js",
            "line": 9
          },
          {
            "location": "src/componentfactory.js",
            "line": 8
          },
          {
            "location": "src/dialog/dialogactionsview.js",
            "line": 8
          },
          {
            "location": "src/dialog/dialogview.js",
            "line": 8
          },
          {
            "location": "src/dialog/dialogview.js",
            "line": 44
          },
          {
            "location": "src/dropdown/button/splitbuttonview.js",
            "line": 10
          },
          {
            "location": "src/dropdown/dropdownpanelview.js",
            "line": 9
          },
          {
            "location": "src/dropdown/dropdownpanelview.js",
            "line": 77
          },
          {
            "location": "src/dropdown/dropdownview.js",
            "line": 9
          },
          {
            "location": "src/dropdown/utils.js",
            "line": 20
          },
          {
            "location": "src/dropdown/utils.js",
            "line": 309
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelp.js",
            "line": 11
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelp.js",
            "line": 104
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 8
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 32
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 51
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 59
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 61
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 73
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 76
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 85
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 86
          },
          {
            "location": "src/editorui/accessibilityhelp/accessibilityhelpcontentview.js",
            "line": 99
          },
          {
            "location": "src/editorui/bodycollection.js",
            "line": 11
          },
          {
            "location": "src/editorui/bodycollection.js",
            "line": 65
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 13
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 17
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 331
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 365
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 404
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 5
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 24
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 60
          },
          {
            "location": "src/focuscycler.js",
            "line": 8
          },
          {
            "location": "src/focuscycler.js",
            "line": 61
          },
          {
            "location": "src/focuscycler.js",
            "line": 257
          },
          {
            "location": "src/input/inputbase.js",
            "line": 9
          },
          {
            "location": "src/label/labelview.js",
            "line": 9
          },
          {
            "location": "src/label/labelview.js",
            "line": 22
          },
          {
            "location": "src/labeledfield/labeledfieldview.js",
            "line": 10
          },
          {
            "location": "src/labeledfield/labeledfieldview.js",
            "line": 65
          },
          {
            "location": "src/labeledfield/labeledfieldview.js",
            "line": 66
          },
          {
            "location": "src/labeledinput/labeledinputview.js",
            "line": 10
          },
          {
            "location": "src/labeledinput/labeledinputview.js",
            "line": 24
          },
          {
            "location": "src/labeledinput/labeledinputview.js",
            "line": 25
          },
          {
            "location": "src/list/listview.js",
            "line": 13
          },
          {
            "location": "src/menubar/menubarmenuview.js",
            "line": 8
          },
          {
            "location": "src/menubar/menubarview.js",
            "line": 8
          },
          {
            "location": "src/menubar/menubarview.js",
            "line": 196
          },
          {
            "location": "src/menubar/utils.js",
            "line": 10
          },
          {
            "location": "src/menubar/utils.js",
            "line": 944
          },
          {
            "location": "src/menubar/utils.js",
            "line": 1051
          },
          {
            "location": "src/menubar/utils.js",
            "line": 1132
          },
          {
            "location": "src/menubar/utils.js",
            "line": 1212
          },
          {
            "location": "src/model.js",
            "line": 8
          },
          {
            "location": "src/model.js",
            "line": 13
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 9
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 12
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 741
          },
          {
            "location": "src/panel/balloon/contextualballoon.js",
            "line": 12
          },
          {
            "location": "src/panel/balloon/contextualballoon.js",
            "line": 15
          },
          {
            "location": "src/panel/sticky/stickypanelview.js",
            "line": 10
          },
          {
            "location": "src/panel/sticky/stickypanelview.js",
            "line": 16
          },
          {
            "location": "src/search/searchresultsview.js",
            "line": 9
          },
          {
            "location": "src/search/text/searchtextview.js",
            "line": 8
          },
          {
            "location": "src/template.js",
            "line": 11
          },
          {
            "location": "src/template.js",
            "line": 52
          },
          {
            "location": "src/template.js",
            "line": 609
          },
          {
            "location": "src/template.js",
            "line": 1016
          },
          {
            "location": "src/template.js",
            "line": 1057
          },
          {
            "location": "src/template.js",
            "line": 1131
          },
          {
            "location": "src/template.js",
            "line": 1153
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 8
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 37
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 71
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 130
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 13
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 15
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 208
          },
          {
            "location": "src/toolbar/block/blockbuttonview.js",
            "line": 9
          },
          {
            "location": "src/toolbar/block/blockbuttonview.js",
            "line": 11
          },
          {
            "location": "src/toolbar/block/blocktoolbar.js",
            "line": 10
          },
          {
            "location": "src/toolbar/block/blocktoolbar.js",
            "line": 16
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 15
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 219
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 246
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 327
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 557
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 10
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 68
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 298
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 310
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 359
          },
          {
            "location": "src/view.js",
            "line": 11
          },
          {
            "location": "src/view.js",
            "line": 78
          },
          {
            "location": "src/view.js",
            "line": 250
          },
          {
            "location": "src/view.js",
            "line": 266
          },
          {
            "location": "src/viewcollection.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-es",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98a9c2f9027da56573bfe0b8fd4deb46c1daa457c7bd0168141f767b9db17b218c717ebf3a5225efc8ded6ef2f78fcd8652924a2030f276ca3c71b1bf3d731cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash-es@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-es@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash-es,cloneDeepWith,lodash-es/cloneDeepWith,isObject,lodash-es/isObject,debounce,lodash-es/debounce,isElement,lodash-es/isElement,throttle,lodash-es/throttle,extend,lodash-es/extend,escapeRegExp,lodash-es/escapeRegExp,escape,lodash-es/escape,cloneDeep,lodash-es/cloneDeep"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 6
          },
          {
            "location": "dist/index.js",
            "line": 1000
          },
          {
            "location": "dist/index.js",
            "line": 1291
          },
          {
            "location": "dist/index.js",
            "line": 4391
          },
          {
            "location": "dist/index.js",
            "line": 4446
          },
          {
            "location": "dist/index.js",
            "line": 6101
          },
          {
            "location": "dist/index.js",
            "line": 8664
          },
          {
            "location": "dist/index.js",
            "line": 9153
          },
          {
            "location": "dist/index.js",
            "line": 9337
          },
          {
            "location": "dist/index.js",
            "line": 9338
          },
          {
            "location": "dist/index.js",
            "line": 9381
          },
          {
            "location": "dist/index.js",
            "line": 9536
          },
          {
            "location": "dist/index.js",
            "line": 10611
          },
          {
            "location": "dist/index.js",
            "line": 11530
          },
          {
            "location": "dist/index.js",
            "line": 11841
          },
          {
            "location": "dist/index.js",
            "line": 11873
          },
          {
            "location": "dist/index.js",
            "line": 12157
          },
          {
            "location": "dist/index.js",
            "line": 13412
          },
          {
            "location": "dist/index.js",
            "line": 13439
          },
          {
            "location": "dist/index.js",
            "line": 13662
          },
          {
            "location": "dist/index.js",
            "line": 14219
          },
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 10
          },
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 48
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 9
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 36
          },
          {
            "location": "src/highlightedtext/highlightedtextview.js",
            "line": 9
          },
          {
            "location": "src/highlightedtext/highlightedtextview.js",
            "line": 62
          },
          {
            "location": "src/highlightedtext/highlightedtextview.js",
            "line": 95
          },
          {
            "location": "src/menubar/menubarview.js",
            "line": 10
          },
          {
            "location": "src/menubar/menubarview.js",
            "line": 151
          },
          {
            "location": "src/menubar/utils.js",
            "line": 11
          },
          {
            "location": "src/menubar/utils.js",
            "line": 855
          },
          {
            "location": "src/menubar/utils.js",
            "line": 885
          },
          {
            "location": "src/menubar/utils.js",
            "line": 1134
          },
          {
            "location": "src/model.js",
            "line": 9
          },
          {
            "location": "src/model.js",
            "line": 24
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 10
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 738
          },
          {
            "location": "src/search/text/searchtextview.js",
            "line": 14
          },
          {
            "location": "src/search/text/searchtextview.js",
            "line": 138
          },
          {
            "location": "src/template.js",
            "line": 12
          },
          {
            "location": "src/template.js",
            "line": 963
          },
          {
            "location": "src/template.js",
            "line": 1273
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 14
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 64
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 17
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 164
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 225
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 11
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 123
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 124
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 231
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 389
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "color-convert"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 9
          },
          {
            "location": "src/colorpicker/utils.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-parse",
      "version": "1.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "448eece3dffccaa0e3ddf1021598d4235622d33fc6ab5a72e37a0d262bc02080d2c8988e64b7d8091404827f07115023fbe3dc45ef009cbd971747d12770539c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-parse@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-parse/-/color-parse-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-parse@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-parse/-/color-parse-1.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "color-parse,default,color-parse/default"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 8
          },
          {
            "location": "dist/index.js",
            "line": 3073
          },
          {
            "location": "dist/index.js",
            "line": 3081
          },
          {
            "location": "src/colorpicker/utils.js",
            "line": 11
          },
          {
            "location": "src/colorpicker/utils.js",
            "line": 92
          },
          {
            "location": "src/colorpicker/utils.js",
            "line": 100
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vanilla-colorful",
      "version": "0.7.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf6619bac4c50ba2a72c4471d5c8282115f60a33d13f45bbe4dfb7082ea06ef757e42878eeb66410c18ed979dff881268b746214bc52d7c81ac8c036ee253b2a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vanilla-colorful@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vanilla-colorful/-/vanilla-colorful-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vanilla-colorful@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vanilla-colorful/-/vanilla-colorful-0.7.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "vanilla-colorful/lib/entrypoints/hex,HexBase,vanilla-colorful/lib/entrypoints/hex/HexBase"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 10
          },
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 15
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/lodash-es@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
      "dependsOn": [
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-engine@41.4.2",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-core@41.4.2",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-engine@41.4.2",
        "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/color-parse@1.4.2",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/vanilla-colorful@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-ui@41.4.2",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-core@41.4.2",
        "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
        "pkg:npm/color-convert@2.0.1",
        "pkg:npm/color-parse@1.4.2",
        "pkg:npm/lodash-es@4.17.21",
        "pkg:npm/vanilla-colorful@0.7.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@ckeditor/ckeditor5-ui@41.4.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-09T16:17:39Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, November 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ckeditor5-ui' with version '41.4.2'. The package type in this SBOM is npm with a single purl namespace '@ckeditor' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}