{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ad9cf62a-6b7c-46c7-a915-bb49cd475f12", "version": 1, "metadata": { "timestamp": "2026-11-03T20:52:21Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "core", "group": "@content-collections", "version": "0.15.3", "description": "Core of Content Collections", "purl": "pkg:npm/%40content-collections/core@0.15.3", "bom-ref": "pkg:npm/@content-collections/core@0.15.3", "author": "Sebastian Sdorra ", "properties": [ { "name": "cdx:npm:scripts", "value": "build, typecheck, test, prepack, postpack" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://content-collections.dev" }, { "type": "vcs", "url": "git+https://github.com/sdorra/content-collections.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@11ty\\n@standard-schema\\n@types\\n@vitest" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@11ty/gray-matter/package.json\\nnode_modules/@standard-schema/spec/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/picomatch/package.json\\nnode_modules/@types/pluralize/package.json\\nnode_modules/@types/serialize-javascript/package.json\\nnode_modules/@vitest/coverage-v8/package.json\\nnode_modules/bundle-require/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pluralize/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json\\nnode_modules/yaml/package.json\\nnode_modules/zod/package.json" } ] }, "components": [ { "authors": [ { "name": "Colin McDonnell " } ], "group": "", "name": "zod", "version": "4.1.11", "description": "TypeScript-first schema declaration and validation library with static type inference", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zod@4.1.11", "externalReferences": [ { "type": "website", "url": "https://zod.dev" }, { "type": "vcs", "url": "git+https://github.com/colinhacks/zod.git" } ], "type": "library", "bom-ref": "pkg:npm/zod@4.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/zod/package.json" }, { "name": "ImportedModules", "value": "zod/mini" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zod/package.json" } ], "concludedValue": "node_modules/zod/package.json" } ], "occurrences": [ { "location": "src/import.ts", "line": 1 }, { "location": "src/import.ts", "line": 3 }, { "location": "src/import.ts", "line": 4 }, { "location": "src/import.ts", "line": 5 }, { "location": "src/import.ts", "line": 6 }, { "location": "src/serializer.ts", "line": 2 }, { "location": "src/serializer.ts", "line": 5 }, { "location": "src/serializer.ts", "line": 7 }, { "location": "src/serializer.ts", "line": 8 }, { "location": "src/serializer.ts", "line": 9 }, { "location": "src/serializer.ts", "line": 10 }, { "location": "src/serializer.ts", "line": 12 }, { "location": "src/serializer.ts", "line": 13 }, { "location": "src/serializer.ts", "line": 14 }, { "location": "src/serializer.ts", "line": 15 }, { "location": "src/serializer.ts", "line": 16 }, { "location": "src/serializer.ts", "line": 29 }, { "location": "src/serializer.ts", "line": 30 }, { "location": "src/serializer.ts", "line": 41 } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Eemeli Aro " } ], "group": "", "name": "yaml", "version": "2.9.1", "description": "JavaScript parser and stringifier for YAML", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@2.9.1", "externalReferences": [ { "type": "website", "url": "https://eemeli.org/yaml/" } ], "type": "library", "bom-ref": "pkg:npm/yaml@2.9.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yaml/package.json" }, { "name": "ImportedModules", "value": "yaml,parse,yaml/parse,stringify,yaml/stringify" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yaml/package.json" } ], "concludedValue": "node_modules/yaml/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 13 }, { "location": "dist/index.js", "line": 409 }, { "location": "src/parser.ts", "line": 2 }, { "location": "src/parser.ts", "line": 19 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.1.11", "description": "Next generation testing framework powered by Vite", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.1.11", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "ImportedModules", "value": "vitest,assertType,vitest/assertType,test,vitest/test,vitest/config,defineConfig,vitest/config/defineConfig" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ], "occurrences": [ { "location": "src/serializer.test-d.ts", "line": 1 }, { "location": "src/serializer.test-d.ts", "line": 6 }, { "location": "src/serializer.test-d.ts", "line": 11 }, { "location": "src/serializer.test-d.ts", "line": 14 }, { "location": "src/serializer.test-d.ts", "line": 19 }, { "location": "vite.config.ts", "line": 1 }, { "location": "vite.config.ts", "line": 11 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.15.12", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.15.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rolldown/tsdown#readme" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.15.12", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" }, { "name": "ImportedModules", "value": "tinyglobby,glob,tinyglobby/glob" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/tinyglobby/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 6 }, { "location": "dist/index.js", "line": 603 }, { "location": "src/collector.ts", "line": 3 }, { "location": "src/collector.ts", "line": 135 } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "7.1.1", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serialize-javascript@7.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" }, { "name": "ImportedModules", "value": "serialize-javascript" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 19 }, { "location": "dist/index.js", "line": 1964 }, { "location": "src/serializer.ts", "line": 1 }, { "location": "src/serializer.ts", "line": 86 } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "", "name": "pluralize", "version": "8.0.0", "description": "Pluralize and singularize any word", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pluralize@8.0.0", "type": "library", "bom-ref": "pkg:npm/pluralize@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pluralize/package.json" }, { "name": "ImportedModules", "value": "pluralize" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pluralize/package.json" } ], "concludedValue": "node_modules/pluralize/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 15 }, { "location": "dist/index.js", "line": 465 }, { "location": "dist/index.js", "line": 468 }, { "location": "src/utils.ts", "line": 2 }, { "location": "src/utils.ts", "line": 7 }, { "location": "src/utils.ts", "line": 13 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.7", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "ImportedModules", "value": "picomatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 16 }, { "location": "dist/index.js", "line": 659 }, { "location": "src/synchronizer.ts", "line": 2 }, { "location": "src/synchronizer.ts", "line": 58 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "6.2.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@6.2.0", "type": "library", "bom-ref": "pkg:npm/p-limit@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "ImportedModules", "value": "p-limit" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 18 }, { "location": "dist/index.js", "line": 2115 }, { "location": "src/transformer.ts", "line": 4 }, { "location": "src/transformer.ts", "line": 289 } ] } }, { "group": "", "name": "esbuild", "version": "0.25.12", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild@0.25.12", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/esbuild@0.25.12", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" }, { "name": "ImportedModules", "value": "esbuild,build,esbuild/build,Plugin,esbuild/Plugin" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 9 }, { "location": "dist/index.js", "line": 311 }, { "location": "src/esbuild.ts", "line": 2 }, { "location": "src/esbuild.ts", "line": 42 }, { "location": "src/esbuild.ts", "line": 66 } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "5.0.0", "description": "Minimal and efficient cross-platform file watching library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "ImportedModules", "value": "chokidar" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 21 }, { "location": "dist/index.js", "line": 2306 }, { "location": "src/watcher.ts", "line": 1 }, { "location": "src/watcher.ts", "line": 71 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "8.0.0", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@8.0.0", "type": "library", "bom-ref": "pkg:npm/camelcase@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "ImportedModules", "value": "camelcase" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 14 }, { "location": "dist/index.js", "line": 465 }, { "location": "dist/index.js", "line": 471 }, { "location": "src/utils.ts", "line": 1 }, { "location": "src/utils.ts", "line": 8 }, { "location": "src/utils.ts", "line": 17 } ] } }, { "group": "", "name": "bundle-require", "version": "5.1.0", "description": "bundle and require a file", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bundle-require@5.1.0", "type": "library", "bom-ref": "pkg:npm/bundle-require@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bundle-require/package.json" }, { "name": "ImportedModules", "value": "bundle-require,loadTsConfig,bundle-require/loadTsConfig,match,bundle-require/match,tsconfigPathsToRegExp,bundle-require/tsconfigPathsToRegExp" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bundle-require/package.json" } ], "concludedValue": "node_modules/bundle-require/package.json" } ], "occurrences": [ { "location": "src/esbuild.ts", "line": 1 }, { "location": "src/esbuild.ts", "line": 10 }, { "location": "src/esbuild.ts", "line": 12 }, { "location": "src/esbuild.ts", "line": 35 }, { "location": "src/esbuild.ts", "line": 47 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@vitest", "name": "coverage-v8", "version": "4.1.11", "description": "V8 coverage provider for Vitest", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/coverage-v8@4.1.11", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/guide/coverage" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/coverage-v8@4.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/coverage-v8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/coverage-v8/package.json" } ], "concludedValue": "node_modules/@vitest/coverage-v8/package.json" } ] } }, { "group": "@types", "name": "serialize-javascript", "version": "5.0.4", "description": "TypeScript definitions for serialize-javascript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/serialize-javascript@5.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/serialize-javascript" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/serialize-javascript@5.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/serialize-javascript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/serialize-javascript/package.json" } ], "concludedValue": "node_modules/@types/serialize-javascript/package.json" } ] } }, { "group": "@types", "name": "pluralize", "version": "0.0.33", "description": "TypeScript definitions for pluralize", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/pluralize@0.0.33", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/pluralize" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/pluralize@0.0.33", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/pluralize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/pluralize/package.json" } ], "concludedValue": "node_modules/@types/pluralize/package.json" } ] } }, { "group": "@types", "name": "picomatch", "version": "3.0.2", "description": "TypeScript definitions for picomatch", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/picomatch@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/picomatch" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/picomatch@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/picomatch/package.json" } ], "concludedValue": "node_modules/@types/picomatch/package.json" } ] } }, { "group": "@types", "name": "node", "version": "20.14.9", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@20.14.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.14.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "Colin McDonnell" } ], "group": "@standard-schema", "name": "spec", "version": "1.1.0", "description": "A family of specs for interoperable TypeScript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40standard-schema/spec@1.1.0", "externalReferences": [ { "type": "website", "url": "https://standardschema.dev" }, { "type": "vcs", "url": "https://github.com/standard-schema/standard-schema" } ], "type": "library", "bom-ref": "pkg:npm/@standard-schema/spec@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@standard-schema/spec/package.json" }, { "name": "ImportedModules", "value": "@standard-schema/spec,StandardSchemaV1,@standard-schema/spec/StandardSchemaV1" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@standard-schema/spec/package.json" } ], "concludedValue": "node_modules/@standard-schema/spec/package.json" } ], "occurrences": [ { "location": "src/transformer.ts", "line": 1 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "@11ty", "name": "gray-matter", "version": "3.0.0", "description": "Parse front-matter from a string or file. Fast, reliable and easy to use. Parses YAML front matter by default, but also has support for YAML, JSON, TOML Front-Matter, with options to set custom delimiters. Used by metalsmith, assemble, verb and many other projects.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%4011ty/gray-matter@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/11ty/gray-matter" } ], "type": "library", "bom-ref": "pkg:npm/@11ty/gray-matter@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@11ty/gray-matter/package.json" }, { "name": "ImportedModules", "value": "@11ty/gray-matter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@11ty/gray-matter/package.json" } ], "concludedValue": "node_modules/@11ty/gray-matter/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 12 }, { "location": "dist/index.js", "line": 412 }, { "location": "src/parser.ts", "line": 1 }, { "location": "src/parser.ts", "line": 23 } ] }, "tags": [ "yaml" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@content-collections/core@0.15.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-03T20:52:21Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, November 3, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'core' with version '0.15.3'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 21 source files." } ] }