{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:a56b3248-1b42-45d0-a9f5-64b3a4c40dbd", "version": 1, "metadata": { "timestamp": "2026-10-31T09:00:42Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "edge-paths", "group": "", "version": "3.0.5", "description": "Get the paths of edge browser easily", "purl": "pkg:npm/edge-paths@3.0.5", "bom-ref": "pkg:npm/edge-paths@3.0.5", "author": "shirshak", "properties": [ { "name": "cdx:npm:scripts", "value": "watch, build, test" }, { "name": "cdx:npm:buildScripts", "value": "watch, build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@sindresorhus\\n@szmarczak\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@sindresorhus/is/package.json\\nnode_modules/@szmarczak/http-timer/package.json\\nnode_modules/@types/cacheable-request/package.json\\nnode_modules/@types/http-cache-semantics/package.json\\nnode_modules/@types/keyv/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/responselike/package.json\\nnode_modules/@types/which/package.json\\nnode_modules/cacheable-lookup/package.json\\nnode_modules/cacheable-request/package.json\\nnode_modules/clone-response/package.json\\nnode_modules/decompress-response/node_modules/mimic-response/package.json\\nnode_modules/decompress-response/package.json\\nnode_modules/defer-to-connect/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/got/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http2-wrapper/package.json\\nnode_modules/isexe/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/keyv/package.json\\nnode_modules/lowercase-keys/package.json\\nnode_modules/mimic-response/package.json\\nnode_modules/normalize-url/package.json\\nnode_modules/once/package.json\\nnode_modules/p-cancelable/package.json\\nnode_modules/pump/package.json\\nnode_modules/quick-lru/package.json\\nnode_modules/resolve-alpn/package.json\\nnode_modules/responselike/package.json\\nnode_modules/typescript/package.json\\nnode_modules/which/package.json\\nnode_modules/wrappy/package.json" } ] }, "components": [ { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "ImportedModules", "value": "which" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 3 }, { "location": "dist/index.js", "line": 7 }, { "location": "index.ts", "line": 3 }, { "location": "index.ts", "line": 15 } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "4.9.4", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@4.9.4", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@4.9.4", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "lukechilds" } ], "group": "", "name": "responselike", "version": "2.0.1", "description": "A response-like object for mocking a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/responselike@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/responselike.git" } ], "type": "library", "bom-ref": "pkg:npm/responselike@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/responselike/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/responselike/package.json" } ], "concludedValue": "node_modules/responselike/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "resolve-alpn", "version": "1.2.1", "description": "Detects the ALPN protocol", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-alpn@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/resolve-alpn#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/resolve-alpn.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve-alpn@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-alpn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-alpn/package.json" } ], "concludedValue": "node_modules/resolve-alpn/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "quick-lru", "version": "5.1.1", "description": "Simple “Least Recently Used” (LRU) cache", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/quick-lru@5.1.1", "type": "library", "bom-ref": "pkg:npm/quick-lru@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/quick-lru/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/quick-lru/package.json" } ], "concludedValue": "node_modules/quick-lru/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus Madsen " } ], "group": "", "name": "pump", "version": "3.0.0", "description": "pipe streams together and close all of them if one of them closes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pump@3.0.0", "type": "library", "bom-ref": "pkg:npm/pump@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pump/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pump/package.json" } ], "concludedValue": "node_modules/pump/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-cancelable", "version": "2.1.1", "description": "Create a promise that can be canceled", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-cancelable@2.1.1", "type": "library", "bom-ref": "pkg:npm/p-cancelable@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/p-cancelable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-cancelable/package.json" } ], "concludedValue": "node_modules/p-cancelable/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "normalize-url", "version": "6.1.0", "description": "Normalize a URL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-url@6.1.0", "type": "library", "bom-ref": "pkg:npm/normalize-url@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-url/package.json" } ], "concludedValue": "node_modules/normalize-url/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "1.0.1", "description": "Mimic a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@1.0.1", "type": "library", "bom-ref": "pkg:npm/mimic-response@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/mimic-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "lowercase-keys", "version": "2.0.0", "description": "Lowercase the keys of an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lowercase-keys@2.0.0", "type": "library", "bom-ref": "pkg:npm/lowercase-keys@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lowercase-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lowercase-keys/package.json" } ], "concludedValue": "node_modules/lowercase-keys/package.json" } ] } }, { "authors": [ { "name": "Jared Wray (http://jaredwray.com)" } ], "group": "", "name": "keyv", "version": "4.5.2", "description": "Simple key-value storage with support for multiple backends", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/keyv@4.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jaredwray/keyv" }, { "type": "vcs", "url": "git+https://github.com/jaredwray/keyv.git" } ], "type": "library", "bom-ref": "pkg:npm/keyv@4.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/keyv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/keyv/package.json" } ], "concludedValue": "node_modules/keyv/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://dominictarr.com)" } ], "group": "", "name": "json-buffer", "version": "3.0.1", "description": "JSON parse & stringify that supports binary via bops & base64", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-buffer@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/json-buffer" }, { "type": "vcs", "url": "git://github.com/dominictarr/json-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/json-buffer@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-buffer/package.json" } ], "concludedValue": "node_modules/json-buffer/package.json" } ] }, "tags": [ "binary", "parse" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "http2-wrapper", "version": "1.0.3", "description": "HTTP2 client, just with the familiar `https` API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http2-wrapper@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/http2-wrapper#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/http2-wrapper.git" } ], "type": "library", "bom-ref": "pkg:npm/http2-wrapper@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/http2-wrapper/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http2-wrapper/package.json" } ], "concludedValue": "node_modules/http2-wrapper/package.json" } ] } }, { "authors": [ { "name": "Kornel Lesiński (https://kornel.ski/)" } ], "group": "", "name": "http-cache-semantics", "version": "4.1.0", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-cache-semantics@4.1.0", "type": "library", "bom-ref": "pkg:npm/http-cache-semantics@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/http-cache-semantics/package.json" } ] } }, { "group": "", "name": "got", "version": "11.8.6", "description": "Human-friendly and powerful HTTP request library for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/got@11.8.6", "type": "library", "bom-ref": "pkg:npm/got@11.8.6", "properties": [ { "name": "SrcFile", "value": "node_modules/got/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/got/package.json" } ], "concludedValue": "node_modules/got/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "5.2.0", "description": "Get a stream as a string, buffer, or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@5.2.0", "type": "library", "bom-ref": "pkg:npm/get-stream@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "end-of-stream", "version": "1.4.4", "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/end-of-stream@1.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/end-of-stream" }, { "type": "vcs", "url": "git://github.com/mafintosh/end-of-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/end-of-stream@1.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/end-of-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/end-of-stream/package.json" } ], "concludedValue": "node_modules/end-of-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "defer-to-connect", "version": "2.0.1", "description": "The safe way to handle the `connect` socket event", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defer-to-connect@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/defer-to-connect#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/defer-to-connect.git" } ], "type": "library", "bom-ref": "pkg:npm/defer-to-connect@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/defer-to-connect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defer-to-connect/package.json" } ], "concludedValue": "node_modules/defer-to-connect/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "decompress-response", "version": "6.0.0", "description": "Decompress a HTTP response if needed", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decompress-response@6.0.0", "type": "library", "bom-ref": "pkg:npm/decompress-response@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-response/package.json" } ], "concludedValue": "node_modules/decompress-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "3.1.0", "description": "Mimic a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@3.1.0", "type": "library", "bom-ref": "pkg:npm/mimic-response@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-response/node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-response/node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/decompress-response/node_modules/mimic-response/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "clone-response", "version": "1.0.3", "description": "Clone a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clone-response@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/sindresorhus/clone-response.git" } ], "type": "library", "bom-ref": "pkg:npm/clone-response@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/clone-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clone-response/package.json" } ], "concludedValue": "node_modules/clone-response/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "cacheable-request", "version": "7.0.2", "description": "Wrap native HTTP requests with RFC compliant cache support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacheable-request@7.0.2", "type": "library", "bom-ref": "pkg:npm/cacheable-request@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cacheable-request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacheable-request/package.json" } ], "concludedValue": "node_modules/cacheable-request/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "cacheable-lookup", "version": "5.0.4", "description": "A cacheable dns.lookup(…) that respects the TTL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacheable-lookup@5.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/cacheable-lookup#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/cacheable-lookup.git" } ], "type": "library", "bom-ref": "pkg:npm/cacheable-lookup@5.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cacheable-lookup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacheable-lookup/package.json" } ], "concludedValue": "node_modules/cacheable-lookup/package.json" } ] } }, { "group": "@types", "name": "which", "version": "2.0.1", "description": "TypeScript definitions for which", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/which@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/which" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/which@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/which/package.json" } ], "concludedValue": "node_modules/@types/which/package.json" } ] } }, { "group": "@types", "name": "responselike", "version": "1.0.0", "description": "TypeScript definitions for responselike", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/responselike@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/responselike@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/responselike/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/responselike/package.json" } ], "concludedValue": "node_modules/@types/responselike/package.json" } ] } }, { "group": "@types", "name": "node", "version": "16.18.11", "description": "TypeScript definitions for Node.js", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@16.18.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@16.18.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "keyv", "version": "3.1.4", "description": "TypeScript definitions for keyv", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/keyv@3.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/keyv" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/keyv@3.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/keyv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/keyv/package.json" } ], "concludedValue": "node_modules/@types/keyv/package.json" } ] } }, { "group": "@types", "name": "http-cache-semantics", "version": "4.0.1", "description": "TypeScript definitions for http-cache-semantics", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/http-cache-semantics@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/http-cache-semantics" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/http-cache-semantics@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/@types/http-cache-semantics/package.json" } ] } }, { "group": "@types", "name": "cacheable-request", "version": "6.0.3", "description": "TypeScript definitions for cacheable-request", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/cacheable-request@6.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cacheable-request" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/cacheable-request@6.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/cacheable-request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/cacheable-request/package.json" } ], "concludedValue": "node_modules/@types/cacheable-request/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "@szmarczak", "name": "http-timer", "version": "4.0.6", "description": "Timings for HTTP requests", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40szmarczak/http-timer@4.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/http-timer#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/http-timer.git" } ], "type": "library", "bom-ref": "pkg:npm/@szmarczak/http-timer@4.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@szmarczak/http-timer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@szmarczak/http-timer/package.json" } ], "concludedValue": "node_modules/@szmarczak/http-timer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "is", "version": "4.6.0", "description": "Type check values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/is@4.6.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/is@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/is/package.json" } ], "concludedValue": "node_modules/@sindresorhus/is/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/edge-paths@3.0.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-31T09:00:42Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 31, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'edge-paths' with version '3.0.5'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 34 source files." } ] }