diff --git a/.github/workflows/npm-ls_demo-results.yml b/.github/workflows/npm-ls_demo-results.yml index eeb5e4c96..a9ffda46f 100644 --- a/.github/workflows/npm-ls_demo-results.yml +++ b/.github/workflows/npm-ls_demo-results.yml @@ -19,13 +19,13 @@ jobs: fail-fast: false # gather all the results ! matrix: subject: - - deps-from-git + # - deps-from-git # - alternative-package-registry # - bundled-dependencies # - dev-dependencies # - juice-shop - # - local-dependencies - # - local-workspaces + - local-dependencies + - local-workspaces # - package-integrity # - package-with-build-id npm-version: diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.2.json b/demo/alternative-package-registry/example-results/bare/bom.1.2.json index 912be3f16..8cb0f8023 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.2.json +++ b/demo/alternative-package-registry/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.2.xml b/demo/alternative-package-registry/example-results/bare/bom.1.2.xml index f99b46cc3..7fb5bd702 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.2.xml +++ b/demo/alternative-package-registry/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.3.json b/demo/alternative-package-registry/example-results/bare/bom.1.3.json index cea7510ee..2ec3541a4 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.3.json +++ b/demo/alternative-package-registry/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.3.xml b/demo/alternative-package-registry/example-results/bare/bom.1.3.xml index e90e5b6a3..dfa405b24 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.3.xml +++ b/demo/alternative-package-registry/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.4.json b/demo/alternative-package-registry/example-results/bare/bom.1.4.json index 9bd7e72fa..69ef5026d 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.4.json +++ b/demo/alternative-package-registry/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.4.xml b/demo/alternative-package-registry/example-results/bare/bom.1.4.xml index 2eeb53975..f620c0ece 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.4.xml +++ b/demo/alternative-package-registry/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.5.json b/demo/alternative-package-registry/example-results/bare/bom.1.5.json index 52b81af4f..fa2f27fa1 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.5.json +++ b/demo/alternative-package-registry/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.5.xml b/demo/alternative-package-registry/example-results/bare/bom.1.5.xml index dd78210f5..54f3989e6 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.5.xml +++ b/demo/alternative-package-registry/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.6.json b/demo/alternative-package-registry/example-results/bare/bom.1.6.json index 7256837bc..7d4f9b348 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.6.json +++ b/demo/alternative-package-registry/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/alternative-package-registry/example-results/bare/bom.1.6.xml b/demo/alternative-package-registry/example-results/bare/bom.1.6.xml index 6a478f964..cfd1318f0 100644 --- a/demo/alternative-package-registry/example-results/bare/bom.1.6.xml +++ b/demo/alternative-package-registry/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.2.json b/demo/alternative-package-registry/example-results/flat/bom.1.2.json index 912be3f16..8cb0f8023 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.2.json +++ b/demo/alternative-package-registry/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.2.xml b/demo/alternative-package-registry/example-results/flat/bom.1.2.xml index f99b46cc3..7fb5bd702 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.2.xml +++ b/demo/alternative-package-registry/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.3.json b/demo/alternative-package-registry/example-results/flat/bom.1.3.json index cea7510ee..2ec3541a4 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.3.json +++ b/demo/alternative-package-registry/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.3.xml b/demo/alternative-package-registry/example-results/flat/bom.1.3.xml index e90e5b6a3..dfa405b24 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.3.xml +++ b/demo/alternative-package-registry/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.4.json b/demo/alternative-package-registry/example-results/flat/bom.1.4.json index 9bd7e72fa..69ef5026d 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.4.json +++ b/demo/alternative-package-registry/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.4.xml b/demo/alternative-package-registry/example-results/flat/bom.1.4.xml index 2eeb53975..f620c0ece 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.4.xml +++ b/demo/alternative-package-registry/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.5.json b/demo/alternative-package-registry/example-results/flat/bom.1.5.json index 52b81af4f..fa2f27fa1 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.5.json +++ b/demo/alternative-package-registry/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.5.xml b/demo/alternative-package-registry/example-results/flat/bom.1.5.xml index dd78210f5..54f3989e6 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.5.xml +++ b/demo/alternative-package-registry/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.6.json b/demo/alternative-package-registry/example-results/flat/bom.1.6.json index 7256837bc..7d4f9b348 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.6.json +++ b/demo/alternative-package-registry/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/alternative-package-registry/example-results/flat/bom.1.6.xml b/demo/alternative-package-registry/example-results/flat/bom.1.6.xml index 6a478f964..cfd1318f0 100644 --- a/demo/alternative-package-registry/example-results/flat/bom.1.6.xml +++ b/demo/alternative-package-registry/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.2.json b/demo/bundled-dependencies/example-results/bare/bom.1.2.json index 1ae3abbcc..df6c33720 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.2.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.2.xml b/demo/bundled-dependencies/example-results/bare/bom.1.2.xml index 31c5d648c..db2cac782 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.2.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.3.json b/demo/bundled-dependencies/example-results/bare/bom.1.3.json index 5d998dcb7..7d1f8baeb 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.3.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.3.xml b/demo/bundled-dependencies/example-results/bare/bom.1.3.xml index 4ab8a07b0..4e1b02e0a 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.3.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.4.json b/demo/bundled-dependencies/example-results/bare/bom.1.4.json index 356498b59..c72307360 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.4.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.4.xml b/demo/bundled-dependencies/example-results/bare/bom.1.4.xml index 5834f4b2d..72f32e0f4 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.4.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.5.json b/demo/bundled-dependencies/example-results/bare/bom.1.5.json index d3b73bf76..e8deb5131 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.5.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.5.xml b/demo/bundled-dependencies/example-results/bare/bom.1.5.xml index 4905e8d3f..bcfecac31 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.5.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.6.json b/demo/bundled-dependencies/example-results/bare/bom.1.6.json index fb9d81fcd..7514458eb 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.6.json +++ b/demo/bundled-dependencies/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/bare/bom.1.6.xml b/demo/bundled-dependencies/example-results/bare/bom.1.6.xml index 4954de87d..ac6d6847e 100644 --- a/demo/bundled-dependencies/example-results/bare/bom.1.6.xml +++ b/demo/bundled-dependencies/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.2.json b/demo/bundled-dependencies/example-results/flat/bom.1.2.json index 523e5b02f..b2e43af9d 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.2.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.2.xml b/demo/bundled-dependencies/example-results/flat/bom.1.2.xml index cec341136..60585fd29 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.2.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.3.json b/demo/bundled-dependencies/example-results/flat/bom.1.3.json index 677641249..a1db1e0a8 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.3.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.3.xml b/demo/bundled-dependencies/example-results/flat/bom.1.3.xml index 19595771e..9a78e34e8 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.3.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.4.json b/demo/bundled-dependencies/example-results/flat/bom.1.4.json index 1531278dd..34122b3b0 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.4.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.4.xml b/demo/bundled-dependencies/example-results/flat/bom.1.4.xml index abdc84d08..e608d3494 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.4.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.5.json b/demo/bundled-dependencies/example-results/flat/bom.1.5.json index 59fd141c1..6c980bf29 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.5.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.5.xml b/demo/bundled-dependencies/example-results/flat/bom.1.5.xml index 0447f9681..0f8766678 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.5.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.6.json b/demo/bundled-dependencies/example-results/flat/bom.1.6.json index 45ec02be1..e601e9428 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.6.json +++ b/demo/bundled-dependencies/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/bundled-dependencies/example-results/flat/bom.1.6.xml b/demo/bundled-dependencies/example-results/flat/bom.1.6.xml index 0de5ab013..965d16193 100644 --- a/demo/bundled-dependencies/example-results/flat/bom.1.6.xml +++ b/demo/bundled-dependencies/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/deps-from-git/example-results/bare/bom.1.2.json b/demo/deps-from-git/example-results/bare/bom.1.2.json new file mode 100644 index 000000000..f1c58614c --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.2.json @@ -0,0 +1,4450 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.2b.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.2", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3" + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0" + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "components": [ + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.2.xml b/demo/deps-from-git/example-results/bare/bom.1.2.xml new file mode 100644 index 000000000..4aaf2b7bd --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.2.xml @@ -0,0 +1,3402 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.3.json b/demo/deps-from-git/example-results/bare/bom.1.3.json new file mode 100644 index 000000000..915f2a225 --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.3.json @@ -0,0 +1,5612 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.3a.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.3", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3" + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ], + "components": [ + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.3.xml b/demo/deps-from-git/example-results/bare/bom.1.3.xml new file mode 100644 index 000000000..df1021d56 --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.3.xml @@ -0,0 +1,3982 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.4.json b/demo/deps-from-git/example-results/bare/bom.1.4.json new file mode 100644 index 000000000..804db1a9b --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.4.json @@ -0,0 +1,5646 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ], + "components": [ + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.4.xml b/demo/deps-from-git/example-results/bare/bom.1.4.xml new file mode 100644 index 000000000..ef8a6070a --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.4.xml @@ -0,0 +1,4010 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-npm.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.5.json b/demo/deps-from-git/example-results/bare/bom.1.5.json new file mode 100644 index 000000000..35d943680 --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.5.json @@ -0,0 +1,5646 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ], + "components": [ + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.5.xml b/demo/deps-from-git/example-results/bare/bom.1.5.xml new file mode 100644 index 000000000..1406258cd --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.5.xml @@ -0,0 +1,4010 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-npm.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.6.json b/demo/deps-from-git/example-results/bare/bom.1.6.json new file mode 100644 index 000000000..26041fc47 --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.6.json @@ -0,0 +1,5745 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ], + "components": [ + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ], + "components": [ + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/bare/bom.1.6.xml b/demo/deps-from-git/example-results/bare/bom.1.6.xml new file mode 100644 index 000000000..1cb4bccd6 --- /dev/null +++ b/demo/deps-from-git/example-results/bare/bom.1.6.xml @@ -0,0 +1,4010 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-npm.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.2.json b/demo/deps-from-git/example-results/flat/bom.1.2.json new file mode 100644 index 000000000..203705140 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.2.json @@ -0,0 +1,4444 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.2b.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.2", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3" + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0" + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.2.xml b/demo/deps-from-git/example-results/flat/bom.1.2.xml new file mode 100644 index 000000000..81cd24cae --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.2.xml @@ -0,0 +1,3396 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.3.json b/demo/deps-from-git/example-results/flat/bom.1.3.json new file mode 100644 index 000000000..df7e7ccb5 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.3.json @@ -0,0 +1,5606 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.3a.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.3", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3" + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.3.xml b/demo/deps-from-git/example-results/flat/bom.1.3.xml new file mode 100644 index 000000000..a57508b2b --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.3.xml @@ -0,0 +1,3976 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.4.json b/demo/deps-from-git/example-results/flat/bom.1.4.json new file mode 100644 index 000000000..6daa3f02c --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.4.json @@ -0,0 +1,5640 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.4.xml b/demo/deps-from-git/example-results/flat/bom.1.4.xml new file mode 100644 index 000000000..f92067563 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.4.xml @@ -0,0 +1,4004 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-npm.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.5.json b/demo/deps-from-git/example-results/flat/bom.1.5.json new file mode 100644 index 000000000..098579699 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.5.json @@ -0,0 +1,5640 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.5.xml b/demo/deps-from-git/example-results/flat/bom.1.5.xml new file mode 100644 index 000000000..1d362cf15 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.5.xml @@ -0,0 +1,4004 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-npm.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.6.json b/demo/deps-from-git/example-results/flat/bom.1.6.json new file mode 100644 index 000000000..4d7136889 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.6.json @@ -0,0 +1,5739 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "9.4.2" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "6.11.0", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "1.19.3", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-deps-from-git", + "version": "1.0.0", + "bom-ref": "demo-deps-from-git@1.0.0", + "description": "demo: dependencies from git", + "purl": "pkg:npm/demo-deps-from-git@1.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.0.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.0.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib0" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.1.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.1.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib1" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.2.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.2.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib2" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.3.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.3.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib3" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.4.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.4.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib4" + } + ] + }, + { + "type": "library", + "name": "cyclonedx-library", + "group": "@cyclonedx", + "version": "6.5.0", + "bom-ref": "@cyclonedx/cyclonedx-library@6.5.0", + "author": "Jan Kowalleck", + "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0", + "type": "distribution", + "comment": "as detected from npm-ls property \"resolved\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/lib5" + } + ] + }, + { + "type": "library", + "name": "node-pre-gyp", + "group": "@mapbox", + "version": "1.0.11", + "bom-ref": "@mapbox/node-pre-gyp@1.0.11", + "author": "Dane Springmeyer", + "description": "Node.js native addon binary install tool", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/mapbox/node-pre-gyp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@mapbox/node-pre-gyp" + } + ] + }, + { + "type": "library", + "name": "dom", + "group": "@oozcitak", + "version": "1.15.10", + "bom-ref": "@oozcitak/dom@1.15.10", + "author": "Ozgur Ozcitak", + "description": "A modern DOM implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/dom@1.15.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/dom/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/dom.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/dom", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/dom" + } + ] + }, + { + "type": "library", + "name": "infra", + "group": "@oozcitak", + "version": "1.0.8", + "bom-ref": "@oozcitak/infra@1.0.8", + "author": "Ozgur Ozcitak", + "description": "An implementation of the Infra Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/infra@1.0.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/infra/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/infra.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/infra", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/infra" + } + ] + }, + { + "type": "library", + "name": "url", + "group": "@oozcitak", + "version": "1.0.4", + "bom-ref": "@oozcitak/url@1.0.4", + "author": "Ozgur Ozcitak", + "description": "An implementation of the URL Living Standard", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/url@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/oozcitak/url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/url", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/url" + } + ] + }, + { + "type": "library", + "name": "util", + "group": "@oozcitak", + "version": "8.3.8", + "bom-ref": "@oozcitak/util@8.3.8", + "author": "Ozgur Ozcitak", + "description": "Utility functions", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/%40oozcitak/util@8.3.8", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/util/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/util.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/util", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/@oozcitak/util" + } + ] + }, + { + "type": "library", + "name": "abbrev", + "version": "1.1.1", + "bom-ref": "abbrev@1.1.1", + "author": "Isaac Z. Schlueter", + "description": "Like ruby's abbrev module, but in js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/isaacs/abbrev-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/abbrev-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/abbrev" + } + ] + }, + { + "type": "library", + "name": "agent-base", + "version": "6.0.2", + "bom-ref": "agent-base@6.0.2", + "author": "Nathan Rajlich", + "description": "Turn a function into an `http.Agent` instance", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-agent-base#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/agent-base" + } + ] + }, + { + "type": "library", + "name": "ajv-formats-draft2019", + "version": "1.6.1", + "bom-ref": "ajv-formats-draft2019@1.6.1", + "author": "Carlo Quinonez", + "description": "Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv-formats-draft2019@1.6.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/luzlab/ajv-formats-draft2019.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/luzlab/ajv-formats-draft2019#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats-draft2019" + } + ] + }, + { + "type": "library", + "name": "ajv-formats", + "version": "2.1.1", + "bom-ref": "ajv-formats@2.1.1", + "author": "Evgeny Poberezkin", + "description": "Format validation for Ajv v7+", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv-formats@2.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv-formats.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/ajv-validator/ajv-formats#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv-formats" + } + ] + }, + { + "type": "library", + "name": "ajv", + "version": "8.17.1", + "bom-ref": "ajv@8.17.1", + "author": "Evgeny Poberezkin", + "description": "Another JSON Schema Validator", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ajv@8.17.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/ajv-validator/ajv/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/ajv-validator/ajv.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://ajv.js.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ajv" + } + ] + }, + { + "type": "library", + "name": "ansi-regex", + "version": "5.0.1", + "bom-ref": "ansi-regex@5.0.1", + "author": "Sindre Sorhus", + "description": "Regular expression for matching ANSI escape codes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ansi-regex@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/ansi-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/ansi-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/ansi-regex#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ansi-regex" + } + ] + }, + { + "type": "library", + "name": "aproba", + "version": "2.0.0", + "bom-ref": "aproba@2.0.0", + "author": "Rebecca Turner", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/aproba@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/aproba/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/aproba.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/aproba" + } + ] + }, + { + "type": "library", + "name": "are-we-there-yet", + "version": "2.0.0", + "bom-ref": "are-we-there-yet@2.0.0", + "author": "GitHub Inc.", + "description": "Keep track of the overall completion of many disparate processes", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/are-we-there-yet@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/are-we-there-yet.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/are-we-there-yet" + } + ] + }, + { + "type": "library", + "name": "argparse", + "version": "1.0.10", + "bom-ref": "argparse@1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/argparse@1.0.10", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/argparse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/argparse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/argparse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/argparse" + } + ] + }, + { + "type": "library", + "name": "balanced-match", + "version": "1.0.2", + "bom-ref": "balanced-match@1.0.2", + "author": "Julian Gruber", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/balanced-match" + } + ] + }, + { + "type": "library", + "name": "bindings", + "version": "1.5.0", + "bom-ref": "bindings@1.5.0", + "author": "Nathan Rajlich", + "description": "Helper module for loading your native module's .node file", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/bindings" + } + ] + }, + { + "type": "library", + "name": "brace-expansion", + "version": "1.1.11", + "bom-ref": "brace-expansion@1.1.11", + "author": "Julian Gruber", + "description": "Brace expansion as known from sh/bash", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/brace-expansion@1.1.11", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/brace-expansion" + } + ] + }, + { + "type": "library", + "name": "chownr", + "version": "2.0.0", + "bom-ref": "chownr@2.0.0", + "author": "Isaac Z. Schlueter", + "description": "like `chown -R`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/chownr/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/chownr.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/chownr#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/chownr" + } + ] + }, + { + "type": "library", + "name": "color-support", + "version": "1.1.3", + "bom-ref": "color-support@1.1.3", + "author": "Isaac Z. Schlueter", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/color-support/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/color-support#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/color-support" + } + ] + }, + { + "type": "library", + "name": "commander", + "version": "2.20.3", + "bom-ref": "commander@2.20.3", + "author": "TJ Holowaychuk", + "description": "the complete solution for node.js command-line programs", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tj/commander.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tj/commander.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tj/commander.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/commander" + } + ] + }, + { + "type": "library", + "name": "concat-map", + "version": "0.0.1", + "bom-ref": "concat-map@0.0.1", + "author": "James Halliday", + "description": "concatenative mapdashery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/substack/node-concat-map/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/substack/node-concat-map#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/concat-map" + } + ] + }, + { + "type": "library", + "name": "console-control-strings", + "version": "1.1.0", + "bom-ref": "console-control-strings@1.1.0", + "author": "Rebecca Turner", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/console-control-strings/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/console-control-strings.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/console-control-strings#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/console-control-strings" + } + ] + }, + { + "type": "library", + "name": "debug", + "version": "4.3.5", + "bom-ref": "debug@4.3.5", + "author": "Josh Junon", + "description": "Lightweight debugging utility for Node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/debug@4.3.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/debug-js/debug/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/debug-js/debug.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/debug-js/debug#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/debug" + } + ] + }, + { + "type": "library", + "name": "delegates", + "version": "1.0.0", + "bom-ref": "delegates@1.0.0", + "description": "delegate methods and accessors to another property", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/delegates@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/visionmedia/node-delegates.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/visionmedia/node-delegates#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/delegates" + } + ] + }, + { + "type": "library", + "name": "detect-libc", + "version": "2.0.3", + "bom-ref": "detect-libc@2.0.3", + "author": "Lovell Fuller", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/detect-libc@2.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/lovell/detect-libc/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/lovell/detect-libc#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/detect-libc" + } + ] + }, + { + "type": "library", + "name": "discontinuous-range", + "version": "1.0.0", + "bom-ref": "discontinuous-range@1.0.0", + "author": "David Tudury", + "description": "for adding, subtracting, and indexing discontinuous ranges of numbers", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/discontinuous-range@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/dtudury/discontinuous-range.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/dtudury/discontinuous-range", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/discontinuous-range" + } + ] + }, + { + "type": "library", + "name": "emoji-regex", + "version": "8.0.0", + "bom-ref": "emoji-regex@8.0.0", + "author": "Mathias Bynens", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/emoji-regex/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/emoji-regex.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/emoji-regex" + } + ] + }, + { + "type": "library", + "name": "esprima", + "version": "4.0.1", + "bom-ref": "esprima@4.0.1", + "author": "Ariya Hidayat", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jquery/esprima/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jquery/esprima.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://esprima.org", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/esprima" + } + ] + }, + { + "type": "library", + "name": "extend", + "version": "3.0.2", + "bom-ref": "extend@3.0.2", + "author": "Stefan Thomas", + "description": "Port of jQuery.extend for node.js and the browser", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/justmoon/node-extend/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/justmoon/node-extend.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/justmoon/node-extend#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/extend" + } + ] + }, + { + "type": "library", + "name": "fast-deep-equal", + "version": "3.1.3", + "bom-ref": "fast-deep-equal@3.1.3", + "author": "Evgeny Poberezkin", + "description": "Fast deep equal", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fast-deep-equal@3.1.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/fast-deep-equal.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/fast-deep-equal#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-deep-equal" + } + ] + }, + { + "type": "library", + "name": "fast-uri", + "version": "3.0.1", + "bom-ref": "fast-uri@3.0.1", + "author": "Vincent Le Goff", + "description": "Dependency free RFC 3986 URI toolbox", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fast-uri@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fastify/fast-uri/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/fastify/fast-uri.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fastify/fast-uri", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fast-uri" + } + ] + }, + { + "type": "library", + "name": "file-uri-to-path", + "version": "1.0.0", + "bom-ref": "file-uri-to-path@1.0.0", + "author": "Nathan Rajlich", + "description": "Convert a file: URI to a file path", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/file-uri-to-path" + } + ] + }, + { + "type": "library", + "name": "fs-minipass", + "version": "2.1.0", + "bom-ref": "fs-minipass@2.1.0", + "author": "Isaac Z. Schlueter", + "description": "fs read and write streams based on minipass", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/fs-minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "fs-minipass@2.1.0|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs-minipass/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "fs.realpath", + "version": "1.0.0", + "bom-ref": "fs.realpath@1.0.0", + "author": "Isaac Z. Schlueter", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/fs.realpath#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/fs.realpath" + } + ] + }, + { + "type": "library", + "name": "gauge", + "version": "3.0.2", + "bom-ref": "gauge@3.0.2", + "author": "Rebecca Turner", + "description": "A terminal based horizontal guage", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/gauge@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/gauge/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/gauge.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/gauge" + } + ] + }, + { + "type": "library", + "name": "glob", + "version": "7.2.3", + "bom-ref": "glob@7.2.3", + "author": "Isaac Z. Schlueter", + "description": "a little globber", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-glob/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-glob#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/glob" + } + ] + }, + { + "type": "library", + "name": "has-unicode", + "version": "2.0.1", + "bom-ref": "has-unicode@2.0.1", + "author": "Rebecca Turner", + "description": "Try to guess if your terminal supports unicode", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/has-unicode/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/has-unicode.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/has-unicode" + } + ] + }, + { + "type": "library", + "name": "https-proxy-agent", + "version": "5.0.1", + "bom-ref": "https-proxy-agent@5.0.1", + "author": "Nathan Rajlich", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/https-proxy-agent" + } + ] + }, + { + "type": "library", + "name": "inflight", + "version": "1.0.6", + "bom-ref": "inflight@1.0.6", + "author": "Isaac Z. Schlueter", + "description": "Add callbacks to requests in flight to avoid async duplication", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inflight/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/inflight.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inflight" + } + ] + }, + { + "type": "library", + "name": "inherits", + "version": "2.0.4", + "bom-ref": "inherits@2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/inherits/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/inherits.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/inherits#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/inherits" + } + ] + }, + { + "type": "library", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "bom-ref": "is-fullwidth-code-point@3.0.0", + "author": "Sindre Sorhus", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/is-fullwidth-code-point" + } + ] + }, + { + "type": "library", + "name": "js-yaml", + "version": "3.14.1", + "bom-ref": "js-yaml@3.14.1", + "author": "Vladimir Zapparov", + "description": "YAML 1.2 parser and serializer", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/js-yaml@3.14.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodeca/js-yaml/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/nodeca/js-yaml.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/js-yaml" + } + ] + }, + { + "type": "library", + "name": "json-schema-traverse", + "version": "1.0.0", + "bom-ref": "json-schema-traverse@1.0.0", + "author": "Evgeny Poberezkin", + "description": "Traverse JSON Schema passing each schema object to callback", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/json-schema-traverse@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/epoberezkin/json-schema-traverse.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/epoberezkin/json-schema-traverse#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/json-schema-traverse" + } + ] + }, + { + "type": "library", + "name": "libxmljs2", + "version": "0.32.0", + "bom-ref": "libxmljs2@0.32.0", + "author": "marudor", + "description": "libxml bindings for v8 javascript engine", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/libxmljs2@0.32.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/marudor/libxmljs2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/marudor/libxmljs2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/marudor/libxmljs2#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/libxmljs2" + } + ] + }, + { + "type": "library", + "name": "make-dir", + "version": "3.1.0", + "bom-ref": "make-dir@3.1.0", + "author": "Sindre Sorhus", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/make-dir@3.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/make-dir.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/make-dir#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "6.3.1", + "bom-ref": "make-dir@3.1.0|semver@6.3.1", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/semver@6.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/make-dir/node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "minimatch", + "version": "3.1.2", + "bom-ref": "minimatch@3.1.2", + "author": "Isaac Z. Schlueter", + "description": "a glob matcher in javascript", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minimatch@3.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minimatch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minimatch#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minimatch" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "5.0.0", + "bom-ref": "minipass@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "minizlib", + "version": "2.1.2", + "bom-ref": "minizlib@2.1.2", + "author": "Isaac Z. Schlueter", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minizlib/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minizlib#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib" + } + ] + }, + { + "type": "library", + "name": "minipass", + "version": "3.3.6", + "bom-ref": "minizlib@2.1.2|minipass@3.3.6", + "author": "Isaac Z. Schlueter", + "description": "minimal implementation of a PassThrough stream", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/minipass/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/minipass#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/minizlib/node_modules/minipass" + } + ] + }, + { + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "bom-ref": "mkdirp@1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-mkdirp.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-mkdirp#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/mkdirp" + } + ] + }, + { + "type": "library", + "name": "moo", + "version": "0.5.2", + "bom-ref": "moo@0.5.2", + "author": "Tim Radvan", + "description": "Optimised tokenizer/lexer generator! 🐄 Much performance. Moo!", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/moo@0.5.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/moo/-/moo-0.5.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tjvr/moo/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tjvr/moo.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tjvr/moo#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/moo" + } + ] + }, + { + "type": "library", + "name": "ms", + "version": "2.1.2", + "bom-ref": "ms@2.1.2", + "description": "Tiny millisecond conversion utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ms@2.1.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/zeit/ms/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/zeit/ms.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/zeit/ms#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ms" + } + ] + }, + { + "type": "library", + "name": "nan", + "version": "2.17.0", + "bom-ref": "nan@2.17.0", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nan@2.17.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nan/-/nan-2.17.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/nan/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/nan.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/nan#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nan" + } + ] + }, + { + "type": "library", + "name": "nearley", + "version": "2.20.1", + "bom-ref": "nearley@2.20.1", + "author": "Hardmath123", + "description": "Simple, fast, powerful parser toolkit for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nearley@2.20.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/hardmath123/nearley/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/hardmath123/nearley.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/hardmath123/nearley#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nearley" + } + ] + }, + { + "type": "library", + "name": "node-fetch", + "version": "2.7.0", + "bom-ref": "node-fetch@2.7.0", + "author": "David Frank", + "description": "A light-weight module that brings window.fetch to node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/node-fetch@2.7.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/bitinn/node-fetch/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/bitinn/node-fetch.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/bitinn/node-fetch", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/node-fetch" + } + ] + }, + { + "type": "library", + "name": "nopt", + "version": "5.0.0", + "bom-ref": "nopt@5.0.0", + "author": "Isaac Z. Schlueter", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/nopt/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/nopt.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/nopt#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/nopt" + } + ] + }, + { + "type": "library", + "name": "npmlog", + "version": "5.0.1", + "bom-ref": "npmlog@5.0.1", + "author": "Isaac Z. Schlueter", + "description": "logger for npm", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/npmlog@5.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/npmlog/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/npmlog.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/npmlog#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/npmlog" + } + ] + }, + { + "type": "library", + "name": "object-assign", + "version": "4.1.1", + "bom-ref": "object-assign@4.1.1", + "author": "Sindre Sorhus", + "description": "ES2015 `Object.assign()` ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/object-assign@4.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/object-assign.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/object-assign#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/object-assign" + } + ] + }, + { + "type": "library", + "name": "once", + "version": "1.4.0", + "bom-ref": "once@1.4.0", + "author": "Isaac Z. Schlueter", + "description": "Run a function exactly one time", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/once/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/once.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/once#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/once" + } + ] + }, + { + "type": "library", + "name": "packageurl-js", + "version": "1.2.1", + "bom-ref": "packageurl-js@1.2.1", + "author": "the purl authors", + "description": "JavaScript library to parse and build \"purl\" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/packageurl-js@1.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/package-url/packageurl-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/package-url/packageurl-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/package-url/packageurl-js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/packageurl-js" + } + ] + }, + { + "type": "library", + "name": "path-is-absolute", + "version": "1.0.1", + "bom-ref": "path-is-absolute@1.0.1", + "author": "Sindre Sorhus", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/path-is-absolute@1.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/path-is-absolute.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/path-is-absolute#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/path-is-absolute" + } + ] + }, + { + "type": "library", + "name": "punycode", + "version": "2.3.1", + "bom-ref": "punycode@2.3.1", + "author": "Mathias Bynens", + "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/punycode@2.3.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/mathiasbynens/punycode.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/mathiasbynens/punycode.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://mths.be/punycode", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/punycode" + } + ] + }, + { + "type": "library", + "name": "railroad-diagrams", + "version": "1.0.0", + "bom-ref": "railroad-diagrams@1.0.0", + "author": "Tab Atkins Jr.", + "description": "A small JS+SVG library for drawing railroad syntax diagrams.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "CC0-1.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/railroad-diagrams@1.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tabatkins/railroad-diagrams.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tabatkins/railroad-diagrams", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/railroad-diagrams" + } + ] + }, + { + "type": "library", + "name": "randexp", + "version": "0.4.6", + "bom-ref": "randexp@0.4.6", + "author": "Roly Fentanes", + "description": "Create random strings that match a given regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/randexp@0.4.6", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/randexp.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/randexp.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://fent.github.io/randexp.js/", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/randexp" + } + ] + }, + { + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "bom-ref": "readable-stream@3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/readable-stream/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/readable-stream.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/readable-stream#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/readable-stream" + } + ] + }, + { + "type": "library", + "name": "require-from-string", + "version": "2.0.2", + "bom-ref": "require-from-string@2.0.2", + "author": "Vsevolod Strukchinsky", + "description": "Require module from string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/require-from-string@2.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/floatdrop/require-from-string.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/floatdrop/require-from-string#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/require-from-string" + } + ] + }, + { + "type": "library", + "name": "ret", + "version": "0.1.15", + "bom-ref": "ret@0.1.15", + "author": "Roly Fentanes", + "description": "Tokenizes a string that represents a regular expression.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/ret@0.1.15", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/fent/ret.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/fent/ret.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/fent/ret.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/ret" + } + ] + }, + { + "type": "library", + "name": "rimraf", + "version": "3.0.2", + "bom-ref": "rimraf@3.0.2", + "author": "Isaac Z. Schlueter", + "description": "A deep deletion module for node (like `rm -rf`)", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/rimraf/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/rimraf#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/rimraf" + } + ] + }, + { + "type": "library", + "name": "safe-buffer", + "version": "5.2.1", + "bom-ref": "safe-buffer@5.2.1", + "author": "Feross Aboukhadijeh", + "description": "Safer Node.js Buffer API", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/feross/safe-buffer/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/safe-buffer" + } + ] + }, + { + "type": "library", + "name": "schemes", + "version": "1.4.0", + "bom-ref": "schemes@1.4.0", + "author": "Peter Müller", + "description": "IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/schemes@1.4.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Munter/schemes/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/Munter/schemes.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Munter/schemes", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/schemes" + } + ] + }, + { + "type": "library", + "name": "semver", + "version": "7.6.2", + "bom-ref": "semver@7.6.2", + "author": "GitHub Inc.", + "description": "The semantic version parser used by npm.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/semver@7.6.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/node-semver/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/node-semver#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/semver" + } + ] + }, + { + "type": "library", + "name": "set-blocking", + "version": "2.0.0", + "bom-ref": "set-blocking@2.0.0", + "author": "Ben Coe", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/yargs/set-blocking/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/set-blocking" + } + ] + }, + { + "type": "library", + "name": "signal-exit", + "version": "3.0.7", + "bom-ref": "signal-exit@3.0.7", + "author": "Ben Coe", + "description": "when you want to fire an event no matter how a process exits.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/tapjs/signal-exit/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/tapjs/signal-exit.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/signal-exit" + } + ] + }, + { + "type": "library", + "name": "smtp-address-parser", + "version": "1.1.0", + "bom-ref": "smtp-address-parser@1.1.0", + "author": "Gene Hightower", + "description": "Parse an SMTP (RFC-5321) address", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/smtp-address-parser@1.1.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/gene-hightower/smtp-address-parser.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/gene-hightower/smtp-address-parser#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/smtp-address-parser" + } + ] + }, + { + "type": "library", + "name": "spdx-exceptions", + "version": "2.5.0", + "bom-ref": "spdx-exceptions@2.5.0", + "author": "The Linux Foundation", + "description": "list of SPDX standard license exceptions", + "licenses": [ + { + "license": { + "id": "CC-BY-3.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-exceptions@2.5.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/kemitchell/spdx-exceptions.json#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-exceptions" + } + ] + }, + { + "type": "library", + "name": "spdx-expression-parse", + "version": "3.0.1", + "bom-ref": "spdx-expression-parse@3.0.1", + "author": "Kyle E. Mitchell", + "description": "parse SPDX license expressions", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-expression-parse@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-expression-parse.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-expression-parse" + } + ] + }, + { + "type": "library", + "name": "spdx-license-ids", + "version": "3.0.18", + "bom-ref": "spdx-license-ids@3.0.18", + "author": "Shinnosuke Watanabe", + "description": "A list of SPDX license identifiers", + "licenses": [ + { + "license": { + "id": "CC0-1.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/spdx-license-ids@3.0.18", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jslicense/spdx-license-ids.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jslicense/spdx-license-ids#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/spdx-license-ids" + } + ] + }, + { + "type": "library", + "name": "sprintf-js", + "version": "1.0.3", + "bom-ref": "sprintf-js@1.0.3", + "author": "Alexandru Marasteanu", + "description": "JavaScript sprintf implementation", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/alexei/sprintf.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/alexei/sprintf.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/alexei/sprintf.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/sprintf-js" + } + ] + }, + { + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "bom-ref": "string_decoder@1.3.0", + "description": "The string_decoder module from Node core", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/nodejs/string_decoder/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string_decoder" + } + ] + }, + { + "type": "library", + "name": "string-width", + "version": "4.2.3", + "bom-ref": "string-width@4.2.3", + "author": "Sindre Sorhus", + "description": "Get the visual width of a string - the number of columns required to display it", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/string-width@4.2.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/sindresorhus/string-width/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/sindresorhus/string-width.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/sindresorhus/string-width#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/string-width" + } + ] + }, + { + "type": "library", + "name": "strip-ansi", + "version": "6.0.1", + "bom-ref": "strip-ansi@6.0.1", + "author": "Sindre Sorhus", + "description": "Strip ANSI escape codes from a string", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/strip-ansi@6.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/chalk/strip-ansi/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/chalk/strip-ansi.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/chalk/strip-ansi#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/strip-ansi" + } + ] + }, + { + "type": "library", + "name": "tar", + "version": "6.2.1", + "bom-ref": "tar@6.2.1", + "author": "GitHub Inc.", + "description": "tar for node", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/node-tar/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/node-tar.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/node-tar#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tar" + } + ] + }, + { + "type": "library", + "name": "tr46", + "version": "0.0.3", + "bom-ref": "tr46@0.0.3", + "author": "Sebastian Mayr", + "description": "An implementation of the Unicode TR46 spec", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/tr46@0.0.3", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/Sebmaster/tr46.js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/Sebmaster/tr46.js#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/tr46" + } + ] + }, + { + "type": "library", + "name": "uri-js", + "version": "4.4.1", + "bom-ref": "uri-js@4.4.1", + "author": "Gary Court", + "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/uri-js@4.4.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/garycourt/uri-js/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/garycourt/uri-js.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/garycourt/uri-js", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/uri-js" + } + ] + }, + { + "type": "library", + "name": "util-deprecate", + "version": "1.0.2", + "bom-ref": "util-deprecate@1.0.2", + "author": "Nathan Rajlich", + "description": "The Node.js `util.deprecate()` function with browser support", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/util-deprecate" + } + ] + }, + { + "type": "library", + "name": "webidl-conversions", + "version": "3.0.1", + "bom-ref": "webidl-conversions@3.0.1", + "author": "Domenic Denicola", + "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/webidl-conversions@3.0.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/webidl-conversions.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/webidl-conversions#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/webidl-conversions" + } + ] + }, + { + "type": "library", + "name": "whatwg-url", + "version": "5.0.0", + "bom-ref": "whatwg-url@5.0.0", + "author": "Sebastian Mayr", + "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/whatwg-url@5.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/jsdom/whatwg-url.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/jsdom/whatwg-url#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/whatwg-url" + } + ] + }, + { + "type": "library", + "name": "wide-align", + "version": "1.1.5", + "bom-ref": "wide-align@1.1.5", + "author": "Rebecca Turner", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/iarna/wide-align/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/iarna/wide-align.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/iarna/wide-align#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wide-align" + } + ] + }, + { + "type": "library", + "name": "wrappy", + "version": "1.0.2", + "bom-ref": "wrappy@1.0.2", + "author": "Isaac Z. Schlueter", + "description": "Callback wrapping utility", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/npm/wrappy/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/npm/wrappy.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/wrappy" + } + ] + }, + { + "type": "library", + "name": "xmlbuilder2", + "version": "3.1.1", + "bom-ref": "xmlbuilder2@3.1.1", + "author": "Ozgur Ozcitak", + "description": "An XML builder for node.js", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "MIT", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/xmlbuilder2@3.1.1", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git://github.com/oozcitak/xmlbuilder2.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "http://github.com/oozcitak/xmlbuilder2", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/xmlbuilder2" + } + ] + }, + { + "type": "library", + "name": "yallist", + "version": "4.0.0", + "bom-ref": "yallist@4.0.0", + "author": "Isaac Z. Schlueter", + "description": "Yet Another Linked List", + "scope": "optional", + "licenses": [ + { + "license": { + "id": "ISC", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", + "type": "distribution", + "hashes": [ + { + "alg": "SHA-512", + "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec" + } + ], + "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\"" + }, + { + "url": "https://github.com/isaacs/yallist/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/isaacs/yallist#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/yallist" + } + ] + } + ], + "dependencies": [ + { + "ref": "@cyclonedx/cyclonedx-library@6.0.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.1.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.2.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.3.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.4.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@cyclonedx/cyclonedx-library@6.5.0", + "dependsOn": [ + "ajv-formats-draft2019@1.6.1", + "ajv-formats@2.1.1", + "ajv@8.17.1", + "libxmljs2@0.32.0", + "packageurl-js@1.2.1", + "spdx-expression-parse@3.0.1", + "xmlbuilder2@3.1.1" + ] + }, + { + "ref": "@mapbox/node-pre-gyp@1.0.11", + "dependsOn": [ + "detect-libc@2.0.3", + "https-proxy-agent@5.0.1", + "make-dir@3.1.0", + "node-fetch@2.7.0", + "nopt@5.0.0", + "npmlog@5.0.1", + "rimraf@3.0.2", + "semver@7.6.2", + "tar@6.2.1" + ] + }, + { + "ref": "@oozcitak/dom@1.15.10", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/url@1.0.4", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/infra@1.0.8", + "dependsOn": [ + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/url@1.0.4", + "dependsOn": [ + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8" + ] + }, + { + "ref": "@oozcitak/util@8.3.8" + }, + { + "ref": "abbrev@1.1.1" + }, + { + "ref": "agent-base@6.0.2", + "dependsOn": [ + "debug@4.3.5" + ] + }, + { + "ref": "ajv-formats-draft2019@1.6.1", + "dependsOn": [ + "ajv@8.17.1", + "punycode@2.3.1", + "schemes@1.4.0", + "smtp-address-parser@1.1.0", + "uri-js@4.4.1" + ] + }, + { + "ref": "ajv-formats@2.1.1", + "dependsOn": [ + "ajv@8.17.1" + ] + }, + { + "ref": "ajv@8.17.1", + "dependsOn": [ + "fast-deep-equal@3.1.3", + "fast-uri@3.0.1", + "json-schema-traverse@1.0.0", + "require-from-string@2.0.2" + ] + }, + { + "ref": "ansi-regex@5.0.1" + }, + { + "ref": "aproba@2.0.0" + }, + { + "ref": "are-we-there-yet@2.0.0", + "dependsOn": [ + "delegates@1.0.0", + "readable-stream@3.6.2" + ] + }, + { + "ref": "argparse@1.0.10", + "dependsOn": [ + "sprintf-js@1.0.3" + ] + }, + { + "ref": "balanced-match@1.0.2" + }, + { + "ref": "bindings@1.5.0", + "dependsOn": [ + "file-uri-to-path@1.0.0" + ] + }, + { + "ref": "brace-expansion@1.1.11", + "dependsOn": [ + "balanced-match@1.0.2", + "concat-map@0.0.1" + ] + }, + { + "ref": "chownr@2.0.0" + }, + { + "ref": "color-support@1.1.3" + }, + { + "ref": "commander@2.20.3" + }, + { + "ref": "concat-map@0.0.1" + }, + { + "ref": "console-control-strings@1.1.0" + }, + { + "ref": "debug@4.3.5", + "dependsOn": [ + "ms@2.1.2" + ] + }, + { + "ref": "delegates@1.0.0" + }, + { + "ref": "demo-deps-from-git@1.0.0", + "dependsOn": [ + "@cyclonedx/cyclonedx-library@6.0.0", + "@cyclonedx/cyclonedx-library@6.1.0", + "@cyclonedx/cyclonedx-library@6.2.0", + "@cyclonedx/cyclonedx-library@6.3.0", + "@cyclonedx/cyclonedx-library@6.4.0", + "@cyclonedx/cyclonedx-library@6.5.0" + ] + }, + { + "ref": "detect-libc@2.0.3" + }, + { + "ref": "discontinuous-range@1.0.0" + }, + { + "ref": "emoji-regex@8.0.0" + }, + { + "ref": "esprima@4.0.1" + }, + { + "ref": "extend@3.0.2" + }, + { + "ref": "fast-deep-equal@3.1.3" + }, + { + "ref": "fast-uri@3.0.1" + }, + { + "ref": "file-uri-to-path@1.0.0" + }, + { + "ref": "fs-minipass@2.1.0", + "dependsOn": [ + "fs-minipass@2.1.0|minipass@3.3.6" + ] + }, + { + "ref": "fs-minipass@2.1.0|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "fs.realpath@1.0.0" + }, + { + "ref": "gauge@3.0.2", + "dependsOn": [ + "aproba@2.0.0", + "color-support@1.1.3", + "console-control-strings@1.1.0", + "has-unicode@2.0.1", + "object-assign@4.1.1", + "signal-exit@3.0.7", + "string-width@4.2.3", + "strip-ansi@6.0.1", + "wide-align@1.1.5" + ] + }, + { + "ref": "glob@7.2.3", + "dependsOn": [ + "fs.realpath@1.0.0", + "inflight@1.0.6", + "inherits@2.0.4", + "minimatch@3.1.2", + "once@1.4.0", + "path-is-absolute@1.0.1" + ] + }, + { + "ref": "has-unicode@2.0.1" + }, + { + "ref": "https-proxy-agent@5.0.1", + "dependsOn": [ + "agent-base@6.0.2", + "debug@4.3.5" + ] + }, + { + "ref": "inflight@1.0.6", + "dependsOn": [ + "once@1.4.0", + "wrappy@1.0.2" + ] + }, + { + "ref": "inherits@2.0.4" + }, + { + "ref": "is-fullwidth-code-point@3.0.0" + }, + { + "ref": "js-yaml@3.14.1", + "dependsOn": [ + "argparse@1.0.10", + "esprima@4.0.1" + ] + }, + { + "ref": "json-schema-traverse@1.0.0" + }, + { + "ref": "libxmljs2@0.32.0", + "dependsOn": [ + "@mapbox/node-pre-gyp@1.0.11", + "bindings@1.5.0", + "nan@2.17.0" + ] + }, + { + "ref": "make-dir@3.1.0", + "dependsOn": [ + "make-dir@3.1.0|semver@6.3.1" + ] + }, + { + "ref": "make-dir@3.1.0|semver@6.3.1" + }, + { + "ref": "minimatch@3.1.2", + "dependsOn": [ + "brace-expansion@1.1.11" + ] + }, + { + "ref": "minipass@5.0.0" + }, + { + "ref": "minizlib@2.1.2", + "dependsOn": [ + "minizlib@2.1.2|minipass@3.3.6", + "yallist@4.0.0" + ] + }, + { + "ref": "minizlib@2.1.2|minipass@3.3.6", + "dependsOn": [ + "yallist@4.0.0" + ] + }, + { + "ref": "mkdirp@1.0.4" + }, + { + "ref": "moo@0.5.2" + }, + { + "ref": "ms@2.1.2" + }, + { + "ref": "nan@2.17.0" + }, + { + "ref": "nearley@2.20.1", + "dependsOn": [ + "commander@2.20.3", + "moo@0.5.2", + "railroad-diagrams@1.0.0", + "randexp@0.4.6" + ] + }, + { + "ref": "node-fetch@2.7.0", + "dependsOn": [ + "whatwg-url@5.0.0" + ] + }, + { + "ref": "nopt@5.0.0", + "dependsOn": [ + "abbrev@1.1.1" + ] + }, + { + "ref": "npmlog@5.0.1", + "dependsOn": [ + "are-we-there-yet@2.0.0", + "console-control-strings@1.1.0", + "gauge@3.0.2", + "set-blocking@2.0.0" + ] + }, + { + "ref": "object-assign@4.1.1" + }, + { + "ref": "once@1.4.0", + "dependsOn": [ + "wrappy@1.0.2" + ] + }, + { + "ref": "packageurl-js@1.2.1" + }, + { + "ref": "path-is-absolute@1.0.1" + }, + { + "ref": "punycode@2.3.1" + }, + { + "ref": "railroad-diagrams@1.0.0" + }, + { + "ref": "randexp@0.4.6", + "dependsOn": [ + "discontinuous-range@1.0.0", + "ret@0.1.15" + ] + }, + { + "ref": "readable-stream@3.6.2", + "dependsOn": [ + "inherits@2.0.4", + "string_decoder@1.3.0", + "util-deprecate@1.0.2" + ] + }, + { + "ref": "require-from-string@2.0.2" + }, + { + "ref": "ret@0.1.15" + }, + { + "ref": "rimraf@3.0.2", + "dependsOn": [ + "glob@7.2.3" + ] + }, + { + "ref": "safe-buffer@5.2.1" + }, + { + "ref": "schemes@1.4.0", + "dependsOn": [ + "extend@3.0.2" + ] + }, + { + "ref": "semver@7.6.2" + }, + { + "ref": "set-blocking@2.0.0" + }, + { + "ref": "signal-exit@3.0.7" + }, + { + "ref": "smtp-address-parser@1.1.0", + "dependsOn": [ + "nearley@2.20.1" + ] + }, + { + "ref": "spdx-exceptions@2.5.0" + }, + { + "ref": "spdx-expression-parse@3.0.1", + "dependsOn": [ + "spdx-exceptions@2.5.0", + "spdx-license-ids@3.0.18" + ] + }, + { + "ref": "spdx-license-ids@3.0.18" + }, + { + "ref": "sprintf-js@1.0.3" + }, + { + "ref": "string_decoder@1.3.0", + "dependsOn": [ + "safe-buffer@5.2.1" + ] + }, + { + "ref": "string-width@4.2.3", + "dependsOn": [ + "emoji-regex@8.0.0", + "is-fullwidth-code-point@3.0.0", + "strip-ansi@6.0.1" + ] + }, + { + "ref": "strip-ansi@6.0.1", + "dependsOn": [ + "ansi-regex@5.0.1" + ] + }, + { + "ref": "tar@6.2.1", + "dependsOn": [ + "chownr@2.0.0", + "fs-minipass@2.1.0", + "minipass@5.0.0", + "minizlib@2.1.2", + "mkdirp@1.0.4", + "yallist@4.0.0" + ] + }, + { + "ref": "tr46@0.0.3" + }, + { + "ref": "uri-js@4.4.1", + "dependsOn": [ + "punycode@2.3.1" + ] + }, + { + "ref": "util-deprecate@1.0.2" + }, + { + "ref": "webidl-conversions@3.0.1" + }, + { + "ref": "whatwg-url@5.0.0", + "dependsOn": [ + "tr46@0.0.3", + "webidl-conversions@3.0.1" + ] + }, + { + "ref": "wide-align@1.1.5", + "dependsOn": [ + "string-width@4.2.3" + ] + }, + { + "ref": "wrappy@1.0.2" + }, + { + "ref": "xmlbuilder2@3.1.1", + "dependsOn": [ + "@oozcitak/dom@1.15.10", + "@oozcitak/infra@1.0.8", + "@oozcitak/util@8.3.8", + "js-yaml@3.14.1" + ] + }, + { + "ref": "yallist@4.0.0" + } + ] +} \ No newline at end of file diff --git a/demo/deps-from-git/example-results/flat/bom.1.6.xml b/demo/deps-from-git/example-results/flat/bom.1.6.xml new file mode 100644 index 000000000..06eee6081 --- /dev/null +++ b/demo/deps-from-git/example-results/flat/bom.1.6.xml @@ -0,0 +1,4004 @@ + + + + + + npm + 9.4.2 + + + @cyclonedx + cyclonedx-library + 6.11.0 + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + + @cyclonedx + cyclonedx-npm + 1.19.3 + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-node-npm.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + + + demo-deps-from-git + 1.0.0 + demo: dependencies from git + pkg:npm/demo-deps-from-git@1.0.0 + + + true + + + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.0.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.0.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23c887c803ac56deb5f91b617ef0486ca3fb98473b + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#c887c803ac56deb5f91b617ef0486ca3fb98473b + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib0 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.1.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.1.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#e1a99f9871ca1cbd9b7f7b097c0e2aa8f1e79fe7 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib1 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.2.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.2.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%23d66d36280dde484bcf73a5c2139961663e3ba954 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#d66d36280dde484bcf73a5c2139961663e3ba954 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib2 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.3.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.3.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%237a914980f0508368df54ca193347cec6ffd16415 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#7a914980f0508368df54ca193347cec6ffd16415 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib3 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.4.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.4.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%233367c1638662d57c53caff0824ee94cd7859bee2 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#3367c1638662d57c53caff0824ee94cd7859bee2 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib4 + + + + Jan Kowalleck + @cyclonedx + cyclonedx-library + 6.5.0 + Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser). + + + Apache-2.0 + + + pkg:npm/%40cyclonedx/cyclonedx-library@6.5.0?download_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-javascript-library.git%234cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + + + git+ssh://git@github.com/CycloneDX/cyclonedx-javascript-library.git#4cea42bf5ec78f17b86dcd308022b6d52e9a98f0 + as detected from npm-ls property "resolved" + + + https://github.com/CycloneDX/cyclonedx-javascript-library/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/CycloneDX/cyclonedx-javascript-library.git + as detected from PackageJson property "repository.url" + + + https://github.com/CycloneDX/cyclonedx-javascript-library#readme + as detected from PackageJson property "homepage" + + + + node_modules/lib5 + + + + Dane Springmeyer + @mapbox + node-pre-gyp + 1.0.11 + Node.js native addon binary install tool + optional + + + BSD-3-Clause + + + pkg:npm/%40mapbox/node-pre-gyp@1.0.11 + + + https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-1.0.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 62195aafabfd590814a7f1deec1760ccecfc96a310f2c53e8e40aaed6c7c33273960524b6c47bb960ba2fd5ec6d6a0750c9ca41d21b0ade71e49a0fad18d0f51 + + + + https://github.com/mapbox/node-pre-gyp/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/mapbox/node-pre-gyp.git + as detected from PackageJson property "repository.url" + + + https://github.com/mapbox/node-pre-gyp#readme + as detected from PackageJson property "homepage" + + + + node_modules/@mapbox/node-pre-gyp + + + + Ozgur Ozcitak + @oozcitak + dom + 1.15.10 + A modern DOM implementation + optional + + + MIT + + + pkg:npm/%40oozcitak/dom@1.15.10 + + + https://registry.npmjs.org/@oozcitak/dom/-/dom-1.15.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d094f6f7f2dac558117062af1e64ab51312f67c057bd98469762c04915201ea0d30b5339835a4b995bf9e8860dcadddb1b60948c391cebbc27c990b5e296d0ad + + + + http://github.com/oozcitak/dom/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/dom.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/dom + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/dom + + + + Ozgur Ozcitak + @oozcitak + infra + 1.0.8 + An implementation of the Infra Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/infra@1.0.8 + + + https://registry.npmjs.org/@oozcitak/infra/-/infra-1.0.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25101473d551e8818738bece185fb2aefb342cef1296a1a73c032acb33ae1593d26525c8ed77f63bdf9ac103d2317808586b6051ffdd03a1ece97eb24846964e + + + + http://github.com/oozcitak/infra/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/infra.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/infra + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/infra + + + + Ozgur Ozcitak + @oozcitak + url + 1.0.4 + An implementation of the URL Living Standard + optional + + + MIT + + + pkg:npm/%40oozcitak/url@1.0.4 + + + https://registry.npmjs.org/@oozcitak/url/-/url-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 903703f32fb2dc50923af9c123a1c9825d34be23bf9c66d0a0220d990d21f7c3a19c6213ad64776ce19fc180ad86072b57c0274c9cfc333b254d06c2dd23809b + + + + http://github.com/oozcitak/url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/oozcitak/url.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/url + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/url + + + + Ozgur Ozcitak + @oozcitak + util + 8.3.8 + Utility functions + optional + + + MIT + + + pkg:npm/%40oozcitak/util@8.3.8 + + + https://registry.npmjs.org/@oozcitak/util/-/util-8.3.8.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4fc4db4a71acc68e930c1271fd282ffc195524bdedb21c593fb02ae51d664a733939c1d8d9d41ac4b32edbe13cbb780dd0c2cecdd8eeaea37865156ecd0c9c39 + + + + http://github.com/oozcitak/util/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/util.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/util + as detected from PackageJson property "homepage" + + + + node_modules/@oozcitak/util + + + + Isaac Z. Schlueter + abbrev + 1.1.1 + Like ruby's abbrev module, but in js + optional + + + ISC + + + pkg:npm/abbrev@1.1.1 + + + https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1 + + + + https://github.com/isaacs/abbrev-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/isaacs/abbrev-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/abbrev-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/abbrev + + + + Nathan Rajlich + agent-base + 6.0.2 + Turn a function into an `http.Agent` instance + optional + + + MIT + + + pkg:npm/agent-base@6.0.2 + + + https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d + + + + https://github.com/TooTallNate/node-agent-base/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-agent-base.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-agent-base#readme + as detected from PackageJson property "homepage" + + + + node_modules/agent-base + + + + Carlo Quinonez + ajv-formats-draft2019 + 1.6.1 + Plugin for AJV that adds support for some of string formats adding in the draft2019 JSON Schema. + optional + + + MIT + + + pkg:npm/ajv-formats-draft2019@1.6.1 + + + https://registry.npmjs.org/ajv-formats-draft2019/-/ajv-formats-draft2019-1.6.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2503ef6afa64583bc8b01a76677dd49180ad5c24a95b81c3ded019fa82f888414e93da1b4197dfc74c80370102b7abf3afa113fbb1cde5ccd1caa5db9eafeed1 + + + + https://github.com/luzlab/ajv-formats-draft2019/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/luzlab/ajv-formats-draft2019.git + as detected from PackageJson property "repository.url" + + + https://github.com/luzlab/ajv-formats-draft2019#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats-draft2019 + + + + Evgeny Poberezkin + ajv-formats + 2.1.1 + Format validation for Ajv v7+ + optional + + + MIT + + + pkg:npm/ajv-formats@2.1.1 + + + https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50 + + + + https://github.com/ajv-validator/ajv-formats/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv-formats.git + as detected from PackageJson property "repository.url" + + + https://github.com/ajv-validator/ajv-formats#readme + as detected from PackageJson property "homepage" + + + + node_modules/ajv-formats + + + + Evgeny Poberezkin + ajv + 8.17.1 + Another JSON Schema Validator + optional + + + MIT + + + pkg:npm/ajv@8.17.1 + + + https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 07f801b8d8394a2313acf902f80dbe716d11b33c316269fa558c41fe29e5052b52e67c7ac4722dfde84a46120c86abac97b6bc2e34286678c2b39be1c31390d6 + + + + https://github.com/ajv-validator/ajv/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/ajv-validator/ajv.git + as detected from PackageJson property "repository.url" + + + https://ajv.js.org + as detected from PackageJson property "homepage" + + + + node_modules/ajv + + + + Sindre Sorhus + ansi-regex + 5.0.1 + Regular expression for matching ANSI escape codes + optional + + + MIT + + + pkg:npm/ansi-regex@5.0.1 + + + https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15 + + + + https://github.com/chalk/ansi-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/ansi-regex.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/ansi-regex#readme + as detected from PackageJson property "homepage" + + + + node_modules/ansi-regex + + + + Rebecca Turner + aproba + 2.0.0 + A ridiculously light-weight argument validator (now browser friendly) + optional + + + ISC + + + pkg:npm/aproba@2.0.0 + + + https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d + + + + https://github.com/iarna/aproba/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/aproba.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/aproba + as detected from PackageJson property "homepage" + + + + node_modules/aproba + + + + GitHub Inc. + are-we-there-yet + 2.0.0 + Keep track of the overall completion of many disparate processes + optional + + + ISC + + + pkg:npm/are-we-there-yet@2.0.0 + + + https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423 + + + + https://github.com/npm/are-we-there-yet/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/are-we-there-yet.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/are-we-there-yet + as detected from PackageJson property "homepage" + + + + node_modules/are-we-there-yet + + + + argparse + 1.0.10 + Very powerful CLI arguments parser. Native port of argparse - python's options parsing library + optional + + + MIT + + + pkg:npm/argparse@1.0.10 + + + https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e + + + + https://github.com/nodeca/argparse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/argparse.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/argparse#readme + as detected from PackageJson property "homepage" + + + + node_modules/argparse + + + + Julian Gruber + balanced-match + 1.0.2 + Match balanced character pairs, like "{" and "}" + optional + + + MIT + + + pkg:npm/balanced-match@1.0.2 + + + https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f + + + + https://github.com/juliangruber/balanced-match/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/balanced-match.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/balanced-match + as detected from PackageJson property "homepage" + + + + node_modules/balanced-match + + + + Nathan Rajlich + bindings + 1.5.0 + Helper module for loading your native module's .node file + optional + + + MIT + + + pkg:npm/bindings@1.5.0 + + + https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89 + + + + https://github.com/TooTallNate/node-bindings/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-bindings.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-bindings + as detected from PackageJson property "homepage" + + + + node_modules/bindings + + + + Julian Gruber + brace-expansion + 1.1.11 + Brace expansion as known from sh/bash + optional + + + MIT + + + pkg:npm/brace-expansion@1.1.11 + + + https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688 + + + + https://github.com/juliangruber/brace-expansion/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/juliangruber/brace-expansion.git + as detected from PackageJson property "repository.url" + + + https://github.com/juliangruber/brace-expansion + as detected from PackageJson property "homepage" + + + + node_modules/brace-expansion + + + + Isaac Z. Schlueter + chownr + 2.0.0 + like `chown -R` + optional + + + ISC + + + pkg:npm/chownr@2.0.0 + + + https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681 + + + + https://github.com/isaacs/chownr/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/chownr.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/chownr#readme + as detected from PackageJson property "homepage" + + + + node_modules/chownr + + + + Isaac Z. Schlueter + color-support + 1.1.3 + A module which will endeavor to guess your terminal's level of color support. + optional + + + ISC + + + pkg:npm/color-support@1.1.3 + + + https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246 + + + + https://github.com/isaacs/color-support/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/color-support.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/color-support#readme + as detected from PackageJson property "homepage" + + + + node_modules/color-support + + + + TJ Holowaychuk + commander + 2.20.3 + the complete solution for node.js command-line programs + optional + + + MIT + + + pkg:npm/commander@2.20.3 + + + https://registry.npmjs.org/commander/-/commander-2.20.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71 + + + + https://github.com/tj/commander.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tj/commander.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/tj/commander.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/commander + + + + James Halliday + concat-map + 0.0.1 + concatenative mapdashery + optional + + + MIT + + + pkg:npm/concat-map@0.0.1 + + + https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa + + + + https://github.com/substack/node-concat-map/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/substack/node-concat-map.git + as detected from PackageJson property "repository.url" + + + https://github.com/substack/node-concat-map#readme + as detected from PackageJson property "homepage" + + + + node_modules/concat-map + + + + Rebecca Turner + console-control-strings + 1.1.0 + A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted. + optional + + + ISC + + + pkg:npm/console-control-strings@1.1.0 + + + https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1 + + + + https://github.com/iarna/console-control-strings/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/console-control-strings.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/console-control-strings#readme + as detected from PackageJson property "homepage" + + + + node_modules/console-control-strings + + + + Josh Junon + debug + 4.3.5 + Lightweight debugging utility for Node.js and the browser + optional + + + MIT + + + pkg:npm/debug@4.3.5 + + + https://registry.npmjs.org/debug/-/debug-4.3.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a6dd1b3449a778322f74bd57b1df680d0ff0ad04645c34f80145a535934f2af5b9c7f8f23bd5455e42543f4eef436ba99b0e4f95a21368f29cdf58cad7757e8e + + + + https://github.com/debug-js/debug/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/debug-js/debug.git + as detected from PackageJson property "repository.url" + + + https://github.com/debug-js/debug#readme + as detected from PackageJson property "homepage" + + + + node_modules/debug + + + + delegates + 1.0.0 + delegate methods and accessors to another property + optional + + + MIT + + + pkg:npm/delegates@1.0.0 + + + https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d + + + + https://github.com/visionmedia/node-delegates/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/visionmedia/node-delegates.git + as detected from PackageJson property "repository.url" + + + https://github.com/visionmedia/node-delegates#readme + as detected from PackageJson property "homepage" + + + + node_modules/delegates + + + + Lovell Fuller + detect-libc + 2.0.3 + Node.js module to detect the C standard library (libc) implementation family and version + optional + + + Apache-2.0 + + + pkg:npm/detect-libc@2.0.3 + + + https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6f0cb43065b9e5b1b8d55ab1c72a4eb1d49d1aa2f05cf23f7e873081360214c6dd522040c4b83d085cc6d3cb33d9aab3927c225fb1e49746d010d8e0f222c1cb + + + + https://github.com/lovell/detect-libc/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/lovell/detect-libc.git + as detected from PackageJson property "repository.url" + + + https://github.com/lovell/detect-libc#readme + as detected from PackageJson property "homepage" + + + + node_modules/detect-libc + + + + David Tudury + discontinuous-range + 1.0.0 + for adding, subtracting, and indexing discontinuous ranges of numbers + optional + + + MIT + + + pkg:npm/discontinuous-range@1.0.0 + + + https://registry.npmjs.org/discontinuous-range/-/discontinuous-range-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 73af0ba4b6cefbb90ffdbd47af5aacf3f049d3d1799216464f1ab166e873c699b024a3a04451c95886fdfca9aa9ea1e12dd3b9e5a3b1147fc4181bd441b2ff45 + + + + https://github.com/dtudury/discontinuous-range/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/dtudury/discontinuous-range.git + as detected from PackageJson property "repository.url" + + + https://github.com/dtudury/discontinuous-range + as detected from PackageJson property "homepage" + + + + node_modules/discontinuous-range + + + + Mathias Bynens + emoji-regex + 8.0.0 + A regular expression to match all Emoji-only symbols as per the Unicode Standard. + optional + + + MIT + + + pkg:npm/emoji-regex@8.0.0 + + + https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8 + + + + https://github.com/mathiasbynens/emoji-regex/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/emoji-regex.git + as detected from PackageJson property "repository.url" + + + https://mths.be/emoji-regex + as detected from PackageJson property "homepage" + + + + node_modules/emoji-regex + + + + Ariya Hidayat + esprima + 4.0.1 + ECMAScript parsing infrastructure for multipurpose analysis + optional + + + BSD-2-Clause + + + pkg:npm/esprima@4.0.1 + + + https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0 + + + + https://github.com/jquery/esprima/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jquery/esprima.git + as detected from PackageJson property "repository.url" + + + http://esprima.org + as detected from PackageJson property "homepage" + + + + node_modules/esprima + + + + Stefan Thomas + extend + 3.0.2 + Port of jQuery.extend for node.js and the browser + optional + + + MIT + + + pkg:npm/extend@3.0.2 + + + https://registry.npmjs.org/extend/-/extend-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe + + + + https://github.com/justmoon/node-extend/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/justmoon/node-extend.git + as detected from PackageJson property "repository.url" + + + https://github.com/justmoon/node-extend#readme + as detected from PackageJson property "homepage" + + + + node_modules/extend + + + + Evgeny Poberezkin + fast-deep-equal + 3.1.3 + Fast deep equal + optional + + + MIT + + + pkg:npm/fast-deep-equal@3.1.3 + + + https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1 + + + + https://github.com/epoberezkin/fast-deep-equal/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/fast-deep-equal.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/fast-deep-equal#readme + as detected from PackageJson property "homepage" + + + + node_modules/fast-deep-equal + + + + Vincent Le Goff + fast-uri + 3.0.1 + Dependency free RFC 3986 URI toolbox + optional + + + MIT + + + pkg:npm/fast-uri@3.0.1 + + + https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3168a929b6d8898234502edc97c9bf8bf2164ea7c2f185ecaa3cf26e375d2ec1634adae8433b075e473bdc9bad32f0625e63af6a993e6b1225efd8a0e6de7907 + + + + https://github.com/fastify/fast-uri/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/fastify/fast-uri.git + as detected from PackageJson property "repository.url" + + + https://github.com/fastify/fast-uri + as detected from PackageJson property "homepage" + + + + node_modules/fast-uri + + + + Nathan Rajlich + file-uri-to-path + 1.0.0 + Convert a file: URI to a file path + optional + + + MIT + + + pkg:npm/file-uri-to-path@1.0.0 + + + https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f + + + + https://github.com/TooTallNate/file-uri-to-path/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/file-uri-to-path.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/file-uri-to-path + as detected from PackageJson property "homepage" + + + + node_modules/file-uri-to-path + + + + Isaac Z. Schlueter + fs-minipass + 2.1.0 + fs read and write streams based on minipass + optional + + + ISC + + + pkg:npm/fs-minipass@2.1.0 + + + https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be + + + + https://github.com/npm/fs-minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/fs-minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/fs-minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs-minipass/node_modules/minipass + + + + Isaac Z. Schlueter + fs.realpath + 1.0.0 + Use node's fs.realpath, but fall back to the JS implementation if the native one fails + optional + + + ISC + + + pkg:npm/fs.realpath@1.0.0 + + + https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f + + + + https://github.com/isaacs/fs.realpath/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/fs.realpath.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/fs.realpath#readme + as detected from PackageJson property "homepage" + + + + node_modules/fs.realpath + + + + Rebecca Turner + gauge + 3.0.2 + A terminal based horizontal guage + optional + + + ISC + + + pkg:npm/gauge@3.0.2 + + + https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1 + + + + https://github.com/npm/gauge/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/gauge.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/gauge + as detected from PackageJson property "homepage" + + + + node_modules/gauge + + + + Isaac Z. Schlueter + glob + 7.2.3 + a little globber + optional + + + ISC + + + pkg:npm/glob@7.2.3 + + + https://registry.npmjs.org/glob/-/glob-7.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5 + + + + https://github.com/isaacs/node-glob/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/node-glob.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-glob#readme + as detected from PackageJson property "homepage" + + + + node_modules/glob + + + + Rebecca Turner + has-unicode + 2.0.1 + Try to guess if your terminal supports unicode + optional + + + ISC + + + pkg:npm/has-unicode@2.0.1 + + + https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825 + + + + https://github.com/iarna/has-unicode/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/has-unicode.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/has-unicode + as detected from PackageJson property "homepage" + + + + node_modules/has-unicode + + + + Nathan Rajlich + https-proxy-agent + 5.0.1 + An HTTP(s) proxy `http.Agent` implementation for HTTPS + optional + + + MIT + + + pkg:npm/https-proxy-agent@5.0.1 + + + https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0 + + + + https://github.com/TooTallNate/node-https-proxy-agent/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/node-https-proxy-agent.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/node-https-proxy-agent#readme + as detected from PackageJson property "homepage" + + + + node_modules/https-proxy-agent + + + + Isaac Z. Schlueter + inflight + 1.0.6 + Add callbacks to requests in flight to avoid async duplication + optional + + + ISC + + + pkg:npm/inflight@1.0.6 + + + https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224 + + + + https://github.com/isaacs/inflight/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/inflight.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inflight + as detected from PackageJson property "homepage" + + + + node_modules/inflight + + + + inherits + 2.0.4 + Browser-friendly inheritance fully compatible with standard node.js inherits() + optional + + + ISC + + + pkg:npm/inherits@2.0.4 + + + https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1 + + + + https://github.com/isaacs/inherits/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/inherits.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/inherits#readme + as detected from PackageJson property "homepage" + + + + node_modules/inherits + + + + Sindre Sorhus + is-fullwidth-code-point + 3.0.0 + Check if the character represented by a given Unicode code point is fullwidth + optional + + + MIT + + + pkg:npm/is-fullwidth-code-point@3.0.0 + + + https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742 + + + + https://github.com/sindresorhus/is-fullwidth-code-point/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/is-fullwidth-code-point.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/is-fullwidth-code-point#readme + as detected from PackageJson property "homepage" + + + + node_modules/is-fullwidth-code-point + + + + Vladimir Zapparov + js-yaml + 3.14.1 + YAML 1.2 parser and serializer + optional + + + MIT + + + pkg:npm/js-yaml@3.14.1 + + + https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6 + + + + https://github.com/nodeca/js-yaml/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/nodeca/js-yaml.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodeca/js-yaml + as detected from PackageJson property "homepage" + + + + node_modules/js-yaml + + + + Evgeny Poberezkin + json-schema-traverse + 1.0.0 + Traverse JSON Schema passing each schema object to callback + optional + + + MIT + + + pkg:npm/json-schema-traverse@1.0.0 + + + https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba + + + + https://github.com/epoberezkin/json-schema-traverse/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/epoberezkin/json-schema-traverse.git + as detected from PackageJson property "repository.url" + + + https://github.com/epoberezkin/json-schema-traverse#readme + as detected from PackageJson property "homepage" + + + + node_modules/json-schema-traverse + + + + marudor + libxmljs2 + 0.32.0 + libxml bindings for v8 javascript engine + optional + + + MIT + + + pkg:npm/libxmljs2@0.32.0 + + + https://registry.npmjs.org/libxmljs2/-/libxmljs2-0.32.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0eebca7d2419794cf0d00e145995df701a6bdd5aa57096356f76b0f7d3f14e25f74f9b75ac43b8812a686cdacff52ef82c88720ca680b3f96986e12b57e9feef + + + + http://github.com/marudor/libxmljs2/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/marudor/libxmljs2.git + as detected from PackageJson property "repository.url" + + + https://github.com/marudor/libxmljs2#readme + as detected from PackageJson property "homepage" + + + + node_modules/libxmljs2 + + + + Sindre Sorhus + make-dir + 3.1.0 + Make a directory and its parents if needed - Think `mkdir -p` + optional + + + MIT + + + pkg:npm/make-dir@3.1.0 + + + https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b + + + + https://github.com/sindresorhus/make-dir/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/make-dir.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/make-dir#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir + + + + GitHub Inc. + semver + 6.3.1 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@6.3.1 + + + https://registry.npmjs.org/semver/-/semver-6.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/make-dir/node_modules/semver + + + + Isaac Z. Schlueter + minimatch + 3.1.2 + a glob matcher in javascript + optional + + + ISC + + + pkg:npm/minimatch@3.1.2 + + + https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f + + + + https://github.com/isaacs/minimatch/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/minimatch.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minimatch#readme + as detected from PackageJson property "homepage" + + + + node_modules/minimatch + + + + Isaac Z. Schlueter + minipass + 5.0.0 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@5.0.0 + + + https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15 + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minipass + + + + Isaac Z. Schlueter + minizlib + 2.1.2 + A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. + optional + + + MIT + + + pkg:npm/minizlib@2.1.2 + + + https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076 + + + + https://github.com/isaacs/minizlib/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minizlib.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minizlib#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib + + + + Isaac Z. Schlueter + minipass + 3.3.6 + minimal implementation of a PassThrough stream + optional + + + ISC + + + pkg:npm/minipass@3.3.6 + + + https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0f188d89dc5210afad1c6eb3388925bcd3b09b786f0ab6d4addb7363be14e87293271bc80df3942f95b93f61a17770d392184a3d81aa78d508879a9c3386017f + + + + https://github.com/isaacs/minipass/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/minipass.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/minipass#readme + as detected from PackageJson property "homepage" + + + + node_modules/minizlib/node_modules/minipass + + + + mkdirp + 1.0.4 + Recursively mkdir, like `mkdir -p` + optional + + + MIT + + + pkg:npm/mkdirp@1.0.4 + + + https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf + + + + https://github.com/isaacs/node-mkdirp/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-mkdirp.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-mkdirp#readme + as detected from PackageJson property "homepage" + + + + node_modules/mkdirp + + + + Tim Radvan + moo + 0.5.2 + Optimised tokenizer/lexer generator! 🐄 Much performance. Moo! + optional + + + BSD-3-Clause + + + pkg:npm/moo@0.5.2 + + + https://registry.npmjs.org/moo/-/moo-0.5.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 8920092c760a9d7e3598a7092a3aaf9c037db1fd0b3034d70c4bc5bfe7dfb9147d6b5308b972e330d2fa12c9c31d290a2d358da90439ba8eb53f811b538354f9 + + + + https://github.com/tjvr/moo/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tjvr/moo.git + as detected from PackageJson property "repository.url" + + + https://github.com/tjvr/moo#readme + as detected from PackageJson property "homepage" + + + + node_modules/moo + + + + ms + 2.1.2 + Tiny millisecond conversion utility + optional + + + MIT + + + pkg:npm/ms@2.1.2 + + + https://registry.npmjs.org/ms/-/ms-2.1.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db + + + + https://github.com/zeit/ms/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/zeit/ms.git + as detected from PackageJson property "repository.url" + + + https://github.com/zeit/ms#readme + as detected from PackageJson property "homepage" + + + + node_modules/ms + + + + nan + 2.17.0 + Native Abstractions for Node.js: C++ header for Node 0.8 -> 18 compatibility + optional + + + MIT + + + pkg:npm/nan@2.17.0 + + + https://registry.npmjs.org/nan/-/nan-2.17.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069 + + + + https://github.com/nodejs/nan/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/nan.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/nan#readme + as detected from PackageJson property "homepage" + + + + node_modules/nan + + + + Hardmath123 + nearley + 2.20.1 + Simple, fast, powerful parser toolkit for JavaScript. + optional + + + MIT + + + pkg:npm/nearley@2.20.1 + + + https://registry.npmjs.org/nearley/-/nearley-2.20.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f8c73c51a01e6c5ce057e2a92399fb0dab2eb9008703cf5d9b09bb257c374d5e37ba47cd43d0e7047dcc75bda0fc8e05771736ea9c229815af8c8c3450020b49 + + + + https://github.com/hardmath123/nearley/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/hardmath123/nearley.git + as detected from PackageJson property "repository.url" + + + https://github.com/hardmath123/nearley#readme + as detected from PackageJson property "homepage" + + + + node_modules/nearley + + + + David Frank + node-fetch + 2.7.0 + A light-weight module that brings window.fetch to node.js + optional + + + MIT + + + pkg:npm/node-fetch@2.7.0 + + + https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0 + + + + https://github.com/bitinn/node-fetch/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/bitinn/node-fetch.git + as detected from PackageJson property "repository.url" + + + https://github.com/bitinn/node-fetch + as detected from PackageJson property "homepage" + + + + node_modules/node-fetch + + + + Isaac Z. Schlueter + nopt + 5.0.0 + Option parsing for Node, supporting types, shorthands, etc. Used by npm. + optional + + + ISC + + + pkg:npm/nopt@5.0.0 + + + https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5 + + + + https://github.com/npm/nopt/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/nopt.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/nopt#readme + as detected from PackageJson property "homepage" + + + + node_modules/nopt + + + + Isaac Z. Schlueter + npmlog + 5.0.1 + logger for npm + optional + + + ISC + + + pkg:npm/npmlog@5.0.1 + + + https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7 + + + + https://github.com/npm/npmlog/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/npmlog.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/npmlog#readme + as detected from PackageJson property "homepage" + + + + node_modules/npmlog + + + + Sindre Sorhus + object-assign + 4.1.1 + ES2015 `Object.assign()` ponyfill + optional + + + MIT + + + pkg:npm/object-assign@4.1.1 + + + https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52 + + + + https://github.com/sindresorhus/object-assign/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/object-assign.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/object-assign#readme + as detected from PackageJson property "homepage" + + + + node_modules/object-assign + + + + Isaac Z. Schlueter + once + 1.4.0 + Run a function exactly one time + optional + + + ISC + + + pkg:npm/once@1.4.0 + + + https://registry.npmjs.org/once/-/once-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb + + + + https://github.com/isaacs/once/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/once.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/once#readme + as detected from PackageJson property "homepage" + + + + node_modules/once + + + + the purl authors + packageurl-js + 1.2.1 + JavaScript library to parse and build "purl" aka. package URLs. This is a microlibrary implementing the purl spec at https://github.com/package-url + + + MIT + + + pkg:npm/packageurl-js@1.2.1 + + + https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 719ebf333b976a815dd7afe4d169f0b48dbdf1409a0c77bf5e54a1f3949e38a6c667586ad31bcd6f1dc82f208cca4eee150c65eac705dc0b9c8fafc43bd37070 + + + + https://github.com/package-url/packageurl-js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/package-url/packageurl-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/package-url/packageurl-js#readme + as detected from PackageJson property "homepage" + + + + node_modules/packageurl-js + + + + Sindre Sorhus + path-is-absolute + 1.0.1 + Node.js 0.12 path.isAbsolute() ponyfill + optional + + + MIT + + + pkg:npm/path-is-absolute@1.0.1 + + + https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242 + + + + https://github.com/sindresorhus/path-is-absolute/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/path-is-absolute.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/path-is-absolute#readme + as detected from PackageJson property "homepage" + + + + node_modules/path-is-absolute + + + + Mathias Bynens + punycode + 2.3.1 + A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms. + optional + + + MIT + + + pkg:npm/punycode@2.3.1 + + + https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16 + + + + https://github.com/mathiasbynens/punycode.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/mathiasbynens/punycode.js.git + as detected from PackageJson property "repository.url" + + + https://mths.be/punycode + as detected from PackageJson property "homepage" + + + + node_modules/punycode + + + + Tab Atkins Jr. + railroad-diagrams + 1.0.0 + A small JS+SVG library for drawing railroad syntax diagrams. + optional + + + CC0-1.0 + + + pkg:npm/railroad-diagrams@1.0.0 + + + https://registry.npmjs.org/railroad-diagrams/-/railroad-diagrams-1.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 733f770e335e2d8d2276b08d387e8fbe264644df46261b1d9bd8699f56024bcefd7e3e16fb1e4814986191165cc1580c98517b47cd9403fece87e47c94b660e8 + + + + https://github.com/tabatkins/railroad-diagrams/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tabatkins/railroad-diagrams.git + as detected from PackageJson property "repository.url" + + + https://github.com/tabatkins/railroad-diagrams + as detected from PackageJson property "homepage" + + + + node_modules/railroad-diagrams + + + + Roly Fentanes + randexp + 0.4.6 + Create random strings that match a given regular expression. + optional + + + MIT + + + pkg:npm/randexp@0.4.6 + + + https://registry.npmjs.org/randexp/-/randexp-0.4.6.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f3458d99df43034b6666bc3da906bad863cf59fb972649eb99598b731beae2e641758a9bd706282939a794651c86f5567b45e22eea58901a1754ec73dc2f0361 + + + + https://github.com/fent/randexp.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/randexp.js.git + as detected from PackageJson property "repository.url" + + + http://fent.github.io/randexp.js/ + as detected from PackageJson property "homepage" + + + + node_modules/randexp + + + + readable-stream + 3.6.2 + Streams3, a user-land copy of the stream library from Node.js + optional + + + MIT + + + pkg:npm/readable-stream@3.6.2 + + + https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0 + + + + https://github.com/nodejs/readable-stream/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/readable-stream.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/readable-stream#readme + as detected from PackageJson property "homepage" + + + + node_modules/readable-stream + + + + Vsevolod Strukchinsky + require-from-string + 2.0.2 + Require module from string + optional + + + MIT + + + pkg:npm/require-from-string@2.0.2 + + + https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13 + + + + https://github.com/floatdrop/require-from-string/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/floatdrop/require-from-string.git + as detected from PackageJson property "repository.url" + + + https://github.com/floatdrop/require-from-string#readme + as detected from PackageJson property "homepage" + + + + node_modules/require-from-string + + + + Roly Fentanes + ret + 0.1.15 + Tokenizes a string that represents a regular expression. + optional + + + MIT + + + pkg:npm/ret@0.1.15 + + + https://registry.npmjs.org/ret/-/ret-0.1.15.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a + + + + https://github.com/fent/ret.js/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/fent/ret.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/fent/ret.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/ret + + + + Isaac Z. Schlueter + rimraf + 3.0.2 + A deep deletion module for node (like `rm -rf`) + optional + + + ISC + + + pkg:npm/rimraf@3.0.2 + + + https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320 + + + + https://github.com/isaacs/rimraf/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/isaacs/rimraf.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/rimraf#readme + as detected from PackageJson property "homepage" + + + + node_modules/rimraf + + + + Feross Aboukhadijeh + safe-buffer + 5.2.1 + Safer Node.js Buffer API + optional + + + MIT + + + pkg:npm/safe-buffer@5.2.1 + + + https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d + + + + https://github.com/feross/safe-buffer/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/feross/safe-buffer.git + as detected from PackageJson property "repository.url" + + + https://github.com/feross/safe-buffer + as detected from PackageJson property "homepage" + + + + node_modules/safe-buffer + + + + Peter Müller + schemes + 1.4.0 + IANA Uniform Resource Identifier (URI) Schemes list, including crowd sourced unofficial ones + optional + + + MIT + + + pkg:npm/schemes@1.4.0 + + + https://registry.npmjs.org/schemes/-/schemes-1.4.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 226172f456c2b109558271374c25a62cf0859d5cf1d251cbfe5fae987a650ea00a7747731699d2ea51592296a00656212b0cd59a5577e9e7346355d3bbc24101 + + + + https://github.com/Munter/schemes/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/Munter/schemes.git + as detected from PackageJson property "repository.url" + + + https://github.com/Munter/schemes + as detected from PackageJson property "homepage" + + + + node_modules/schemes + + + + GitHub Inc. + semver + 7.6.2 + The semantic version parser used by npm. + optional + + + ISC + + + pkg:npm/semver@7.6.2 + + + https://registry.npmjs.org/semver/-/semver-7.6.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 14d0080560b1f6a7118681dc81c27482f53b48dd65614d995ee49f974e1b482e4ea6f0c71722428dd347a263d7c6342508153aed85bae0fcd8eff548107ec5db + + + + https://github.com/npm/node-semver/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/node-semver.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/node-semver#readme + as detected from PackageJson property "homepage" + + + + node_modules/semver + + + + Ben Coe + set-blocking + 2.0.0 + set blocking stdio and stderr ensuring that terminal output does not truncate + optional + + + ISC + + + pkg:npm/set-blocking@2.0.0 + + + https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87 + + + + https://github.com/yargs/set-blocking/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/yargs/set-blocking.git + as detected from PackageJson property "repository.url" + + + https://github.com/yargs/set-blocking#readme + as detected from PackageJson property "homepage" + + + + node_modules/set-blocking + + + + Ben Coe + signal-exit + 3.0.7 + when you want to fire an event no matter how a process exits. + optional + + + ISC + + + pkg:npm/signal-exit@3.0.7 + + + https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19 + + + + https://github.com/tapjs/signal-exit/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/tapjs/signal-exit.git + as detected from PackageJson property "repository.url" + + + https://github.com/tapjs/signal-exit + as detected from PackageJson property "homepage" + + + + node_modules/signal-exit + + + + Gene Hightower + smtp-address-parser + 1.1.0 + Parse an SMTP (RFC-5321) address + optional + + + MIT + + + pkg:npm/smtp-address-parser@1.1.0 + + + https://registry.npmjs.org/smtp-address-parser/-/smtp-address-parser-1.1.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 1b3d758db354d2996b45e53d4a3edf9ac852071c49f5285d0f6ab892d1c81e8feba531fa945c90a181d828834f26d3def1a1c59ec6ed5b8e8bb34b42081b0866 + + + + https://github.com/gene-hightower/smtp-address-parser/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/gene-hightower/smtp-address-parser.git + as detected from PackageJson property "repository.url" + + + https://github.com/gene-hightower/smtp-address-parser#readme + as detected from PackageJson property "homepage" + + + + node_modules/smtp-address-parser + + + + The Linux Foundation + spdx-exceptions + 2.5.0 + list of SPDX standard license exceptions + + + CC-BY-3.0 + + + pkg:npm/spdx-exceptions@2.5.0 + + + https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3 + + + + https://github.com/kemitchell/spdx-exceptions.json/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/kemitchell/spdx-exceptions.json.git + as detected from PackageJson property "repository.url" + + + https://github.com/kemitchell/spdx-exceptions.json#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-exceptions + + + + Kyle E. Mitchell + spdx-expression-parse + 3.0.1 + parse SPDX license expressions + + + MIT + + + pkg:npm/spdx-expression-parse@3.0.1 + + + https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1 + + + + https://github.com/jslicense/spdx-expression-parse.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-expression-parse.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-expression-parse.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-expression-parse + + + + Shinnosuke Watanabe + spdx-license-ids + 3.0.18 + A list of SPDX license identifiers + + + CC0-1.0 + + + pkg:npm/spdx-license-ids@3.0.18 + + + https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.18.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c7146cdf506a4581f088ccee74eae94a21ed67c8bf19e8a89c20434a29616118fef6021c23cc0265395764abbdbd9215a9588fddd729f6a1391ba02521a0fe4d + + + + https://github.com/jslicense/spdx-license-ids/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jslicense/spdx-license-ids.git + as detected from PackageJson property "repository.url" + + + https://github.com/jslicense/spdx-license-ids#readme + as detected from PackageJson property "homepage" + + + + node_modules/spdx-license-ids + + + + Alexandru Marasteanu + sprintf-js + 1.0.3 + JavaScript sprintf implementation + optional + + + BSD-3-Clause + + + pkg:npm/sprintf-js@1.0.3 + + + https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2 + + + + https://github.com/alexei/sprintf.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/alexei/sprintf.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/alexei/sprintf.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/sprintf-js + + + + string_decoder + 1.3.0 + The string_decoder module from Node core + optional + + + MIT + + + pkg:npm/string_decoder@1.3.0 + + + https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78 + + + + https://github.com/nodejs/string_decoder/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/nodejs/string_decoder.git + as detected from PackageJson property "repository.url" + + + https://github.com/nodejs/string_decoder + as detected from PackageJson property "homepage" + + + + node_modules/string_decoder + + + + Sindre Sorhus + string-width + 4.2.3 + Get the visual width of a string - the number of columns required to display it + optional + + + MIT + + + pkg:npm/string-width@4.2.3 + + + https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe + + + + https://github.com/sindresorhus/string-width/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/sindresorhus/string-width.git + as detected from PackageJson property "repository.url" + + + https://github.com/sindresorhus/string-width#readme + as detected from PackageJson property "homepage" + + + + node_modules/string-width + + + + Sindre Sorhus + strip-ansi + 6.0.1 + Strip ANSI escape codes from a string + optional + + + MIT + + + pkg:npm/strip-ansi@6.0.1 + + + https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4 + + + + https://github.com/chalk/strip-ansi/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/chalk/strip-ansi.git + as detected from PackageJson property "repository.url" + + + https://github.com/chalk/strip-ansi#readme + as detected from PackageJson property "homepage" + + + + node_modules/strip-ansi + + + + GitHub Inc. + tar + 6.2.1 + tar for node + optional + + + ISC + + + pkg:npm/tar@6.2.1 + + + https://registry.npmjs.org/tar/-/tar-6.2.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 0d9e323914f0adb4e3ffb31962adb0fbf645748e8e67f7fd4851d1fbbd6021551984e40f1f35422e9bd19cf83268ca5f5b1c64ff838dbdadc6412c8d20a46fe8 + + + + https://github.com/isaacs/node-tar/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/node-tar.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/node-tar#readme + as detected from PackageJson property "homepage" + + + + node_modules/tar + + + + Sebastian Mayr + tr46 + 0.0.3 + An implementation of the Unicode TR46 spec + optional + + + MIT + + + pkg:npm/tr46@0.0.3 + + + https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af + + + + https://github.com/Sebmaster/tr46.js/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/Sebmaster/tr46.js.git + as detected from PackageJson property "repository.url" + + + https://github.com/Sebmaster/tr46.js#readme + as detected from PackageJson property "homepage" + + + + node_modules/tr46 + + + + Gary Court + uri-js + 4.4.1 + An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript. + optional + + + BSD-2-Clause + + + pkg:npm/uri-js@4.4.1 + + + https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06 + + + + https://github.com/garycourt/uri-js/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/garycourt/uri-js.git + as detected from PackageJson property "repository.url" + + + https://github.com/garycourt/uri-js + as detected from PackageJson property "homepage" + + + + node_modules/uri-js + + + + Nathan Rajlich + util-deprecate + 1.0.2 + The Node.js `util.deprecate()` function with browser support + optional + + + MIT + + + pkg:npm/util-deprecate@1.0.2 + + + https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73 + + + + https://github.com/TooTallNate/util-deprecate/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/TooTallNate/util-deprecate.git + as detected from PackageJson property "repository.url" + + + https://github.com/TooTallNate/util-deprecate + as detected from PackageJson property "homepage" + + + + node_modules/util-deprecate + + + + Domenic Denicola + webidl-conversions + 3.0.1 + Implements the WebIDL algorithms for converting to and from JavaScript values + optional + + + BSD-2-Clause + + + pkg:npm/webidl-conversions@3.0.1 + + + https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79 + + + + https://github.com/jsdom/webidl-conversions/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/webidl-conversions.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/webidl-conversions#readme + as detected from PackageJson property "homepage" + + + + node_modules/webidl-conversions + + + + Sebastian Mayr + whatwg-url + 5.0.0 + An implementation of the WHATWG URL Standard's URL API and parsing machinery + optional + + + MIT + + + pkg:npm/whatwg-url@5.0.0 + + + https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f + + + + https://github.com/jsdom/whatwg-url/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/jsdom/whatwg-url.git + as detected from PackageJson property "repository.url" + + + https://github.com/jsdom/whatwg-url#readme + as detected from PackageJson property "homepage" + + + + node_modules/whatwg-url + + + + Rebecca Turner + wide-align + 1.1.5 + A wide-character aware text alignment function for use on the console or with fixed width fonts. + optional + + + ISC + + + pkg:npm/wide-align@1.1.5 + + + https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a + + + + https://github.com/iarna/wide-align/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/iarna/wide-align.git + as detected from PackageJson property "repository.url" + + + https://github.com/iarna/wide-align#readme + as detected from PackageJson property "homepage" + + + + node_modules/wide-align + + + + Isaac Z. Schlueter + wrappy + 1.0.2 + Callback wrapping utility + optional + + + ISC + + + pkg:npm/wrappy@1.0.2 + + + https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71 + + + + https://github.com/npm/wrappy/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/npm/wrappy.git + as detected from PackageJson property "repository.url" + + + https://github.com/npm/wrappy + as detected from PackageJson property "homepage" + + + + node_modules/wrappy + + + + Ozgur Ozcitak + xmlbuilder2 + 3.1.1 + An XML builder for node.js + optional + + + MIT + + + pkg:npm/xmlbuilder2@3.1.1 + + + https://registry.npmjs.org/xmlbuilder2/-/xmlbuilder2-3.1.1.tgz + as detected from npm-ls property "resolved" and property "integrity" + + 58249f6df66740374b40b88c746510a4cc71724790e2864d30d84b56471e913bbbc610f8b6e503c803e863c0b05ef05813a2f004777a416d9665794e5abd6f0b + + + + http://github.com/oozcitak/xmlbuilder2/issues + as detected from PackageJson property "bugs.url" + + + git://github.com/oozcitak/xmlbuilder2.git + as detected from PackageJson property "repository.url" + + + http://github.com/oozcitak/xmlbuilder2 + as detected from PackageJson property "homepage" + + + + node_modules/xmlbuilder2 + + + + Isaac Z. Schlueter + yallist + 4.0.0 + Yet Another Linked List + optional + + + ISC + + + pkg:npm/yallist@4.0.0 + + + https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz + as detected from npm-ls property "resolved" and property "integrity" + + df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec + + + + https://github.com/isaacs/yallist/issues + as detected from PackageJson property "bugs.url" + + + git+https://github.com/isaacs/yallist.git + as detected from PackageJson property "repository.url" + + + https://github.com/isaacs/yallist#readme + as detected from PackageJson property "homepage" + + + + node_modules/yallist + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/demo/dev-dependencies/example-results/bare/bom.1.2.json b/demo/dev-dependencies/example-results/bare/bom.1.2.json index 34cd712d7..7356a95b8 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.2.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/dev-dependencies/example-results/bare/bom.1.2.xml b/demo/dev-dependencies/example-results/bare/bom.1.2.xml index 56b083545..de32eebcd 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.2.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/dev-dependencies/example-results/bare/bom.1.3.json b/demo/dev-dependencies/example-results/bare/bom.1.3.json index 1ff4b0b74..02d83c2b9 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.3.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/dev-dependencies/example-results/bare/bom.1.3.xml b/demo/dev-dependencies/example-results/bare/bom.1.3.xml index e542a1e73..c03aac0c6 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.3.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/dev-dependencies/example-results/bare/bom.1.4.json b/demo/dev-dependencies/example-results/bare/bom.1.4.json index a26e94682..db7a6600a 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.4.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/bare/bom.1.4.xml b/demo/dev-dependencies/example-results/bare/bom.1.4.xml index f20d32fb2..a3c03775f 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.4.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/bare/bom.1.5.json b/demo/dev-dependencies/example-results/bare/bom.1.5.json index 830332608..287985ac5 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.5.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/bare/bom.1.5.xml b/demo/dev-dependencies/example-results/bare/bom.1.5.xml index dc3063c24..5f2d9a5b8 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.5.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/bare/bom.1.6.json b/demo/dev-dependencies/example-results/bare/bom.1.6.json index a246d8161..6daa7864f 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.6.json +++ b/demo/dev-dependencies/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/bare/bom.1.6.xml b/demo/dev-dependencies/example-results/bare/bom.1.6.xml index 08be0e856..c6d819472 100644 --- a/demo/dev-dependencies/example-results/bare/bom.1.6.xml +++ b/demo/dev-dependencies/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/flat/bom.1.2.json b/demo/dev-dependencies/example-results/flat/bom.1.2.json index 34cd712d7..7356a95b8 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.2.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/dev-dependencies/example-results/flat/bom.1.2.xml b/demo/dev-dependencies/example-results/flat/bom.1.2.xml index 56b083545..de32eebcd 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.2.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/dev-dependencies/example-results/flat/bom.1.3.json b/demo/dev-dependencies/example-results/flat/bom.1.3.json index 1ff4b0b74..02d83c2b9 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.3.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/dev-dependencies/example-results/flat/bom.1.3.xml b/demo/dev-dependencies/example-results/flat/bom.1.3.xml index e542a1e73..c03aac0c6 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.3.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/dev-dependencies/example-results/flat/bom.1.4.json b/demo/dev-dependencies/example-results/flat/bom.1.4.json index a26e94682..db7a6600a 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.4.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/flat/bom.1.4.xml b/demo/dev-dependencies/example-results/flat/bom.1.4.xml index f20d32fb2..a3c03775f 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.4.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/flat/bom.1.5.json b/demo/dev-dependencies/example-results/flat/bom.1.5.json index 830332608..287985ac5 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.5.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/flat/bom.1.5.xml b/demo/dev-dependencies/example-results/flat/bom.1.5.xml index dc3063c24..5f2d9a5b8 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.5.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/dev-dependencies/example-results/flat/bom.1.6.json b/demo/dev-dependencies/example-results/flat/bom.1.6.json index a246d8161..6daa7864f 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.6.json +++ b/demo/dev-dependencies/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/dev-dependencies/example-results/flat/bom.1.6.xml b/demo/dev-dependencies/example-results/flat/bom.1.6.xml index 08be0e856..c6d819472 100644 --- a/demo/dev-dependencies/example-results/flat/bom.1.6.xml +++ b/demo/dev-dependencies/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/bare/bom.1.2.json b/demo/juice-shop/example-results/bare/bom.1.2.json index cad2fcd8d..65abd8bf6 100644 --- a/demo/juice-shop/example-results/bare/bom.1.2.json +++ b/demo/juice-shop/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/juice-shop/example-results/bare/bom.1.2.xml b/demo/juice-shop/example-results/bare/bom.1.2.xml index d6163b222..03e5979fe 100644 --- a/demo/juice-shop/example-results/bare/bom.1.2.xml +++ b/demo/juice-shop/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/juice-shop/example-results/bare/bom.1.3.json b/demo/juice-shop/example-results/bare/bom.1.3.json index 69af3c948..e817b4259 100644 --- a/demo/juice-shop/example-results/bare/bom.1.3.json +++ b/demo/juice-shop/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/juice-shop/example-results/bare/bom.1.3.xml b/demo/juice-shop/example-results/bare/bom.1.3.xml index 64cabfb00..fbe4fe643 100644 --- a/demo/juice-shop/example-results/bare/bom.1.3.xml +++ b/demo/juice-shop/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/juice-shop/example-results/bare/bom.1.4.json b/demo/juice-shop/example-results/bare/bom.1.4.json index 0fde08146..9d3a6227c 100644 --- a/demo/juice-shop/example-results/bare/bom.1.4.json +++ b/demo/juice-shop/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/juice-shop/example-results/bare/bom.1.4.xml b/demo/juice-shop/example-results/bare/bom.1.4.xml index 07158924b..f17c61071 100644 --- a/demo/juice-shop/example-results/bare/bom.1.4.xml +++ b/demo/juice-shop/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/bare/bom.1.5.json b/demo/juice-shop/example-results/bare/bom.1.5.json index c2d867224..12e6fbf69 100644 --- a/demo/juice-shop/example-results/bare/bom.1.5.json +++ b/demo/juice-shop/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/juice-shop/example-results/bare/bom.1.5.xml b/demo/juice-shop/example-results/bare/bom.1.5.xml index 7d7839505..f2e2a9c0d 100644 --- a/demo/juice-shop/example-results/bare/bom.1.5.xml +++ b/demo/juice-shop/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/bare/bom.1.6.json b/demo/juice-shop/example-results/bare/bom.1.6.json index c5eab54e5..9f07076c1 100644 --- a/demo/juice-shop/example-results/bare/bom.1.6.json +++ b/demo/juice-shop/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/juice-shop/example-results/bare/bom.1.6.xml b/demo/juice-shop/example-results/bare/bom.1.6.xml index 62d08bc98..84ed4f25e 100644 --- a/demo/juice-shop/example-results/bare/bom.1.6.xml +++ b/demo/juice-shop/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/flat/bom.1.2.json b/demo/juice-shop/example-results/flat/bom.1.2.json index 33a0a2d3a..720a0a122 100644 --- a/demo/juice-shop/example-results/flat/bom.1.2.json +++ b/demo/juice-shop/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/juice-shop/example-results/flat/bom.1.2.xml b/demo/juice-shop/example-results/flat/bom.1.2.xml index b9106ca6c..d5e6a0179 100644 --- a/demo/juice-shop/example-results/flat/bom.1.2.xml +++ b/demo/juice-shop/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/juice-shop/example-results/flat/bom.1.3.json b/demo/juice-shop/example-results/flat/bom.1.3.json index 409b9bf86..de0ec200c 100644 --- a/demo/juice-shop/example-results/flat/bom.1.3.json +++ b/demo/juice-shop/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/juice-shop/example-results/flat/bom.1.3.xml b/demo/juice-shop/example-results/flat/bom.1.3.xml index c73d67873..653d68311 100644 --- a/demo/juice-shop/example-results/flat/bom.1.3.xml +++ b/demo/juice-shop/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/juice-shop/example-results/flat/bom.1.4.json b/demo/juice-shop/example-results/flat/bom.1.4.json index f988955de..f9cd97f21 100644 --- a/demo/juice-shop/example-results/flat/bom.1.4.json +++ b/demo/juice-shop/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/juice-shop/example-results/flat/bom.1.4.xml b/demo/juice-shop/example-results/flat/bom.1.4.xml index e27bb002e..b5bdefb81 100644 --- a/demo/juice-shop/example-results/flat/bom.1.4.xml +++ b/demo/juice-shop/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/flat/bom.1.5.json b/demo/juice-shop/example-results/flat/bom.1.5.json index 98238dc51..64fd1d609 100644 --- a/demo/juice-shop/example-results/flat/bom.1.5.json +++ b/demo/juice-shop/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/juice-shop/example-results/flat/bom.1.5.xml b/demo/juice-shop/example-results/flat/bom.1.5.xml index 192fa32fd..977ca19fc 100644 --- a/demo/juice-shop/example-results/flat/bom.1.5.xml +++ b/demo/juice-shop/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/juice-shop/example-results/flat/bom.1.6.json b/demo/juice-shop/example-results/flat/bom.1.6.json index 248c2db47..bb97466f4 100644 --- a/demo/juice-shop/example-results/flat/bom.1.6.json +++ b/demo/juice-shop/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/juice-shop/example-results/flat/bom.1.6.xml b/demo/juice-shop/example-results/flat/bom.1.6.xml index 82f185262..83e51b7de 100644 --- a/demo/juice-shop/example-results/flat/bom.1.6.xml +++ b/demo/juice-shop/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/local-dependencies/example-results/bare/bom.1.2.json b/demo/local-dependencies/example-results/bare/bom.1.2.json index 1c2741916..d1944575c 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.2.json +++ b/demo/local-dependencies/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -120,23 +120,45 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "version": "", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -145,6 +167,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.2.xml b/demo/local-dependencies/example-results/bare/bom.1.2.xml index eb837d88c..3a2226cf2 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.2.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -94,21 +94,41 @@ - - DummyComponent.InterferedDependency.my-noname - - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.3.json b/demo/local-dependencies/example-results/bare/bom.1.3.json index a8ece6ba7..f34f5de32 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.3.json +++ b/demo/local-dependencies/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -150,23 +150,55 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "version": "", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -175,6 +207,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.3.xml b/demo/local-dependencies/example-results/bare/bom.1.3.xml index 818a7d87e..39a16cb23 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.3.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -106,21 +106,45 @@ true - - DummyComponent.InterferedDependency.my-noname - - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.4.json b/demo/local-dependencies/example-results/bare/bom.1.4.json index ea02d179f..aef824b5b 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.4.json +++ b/demo/local-dependencies/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -184,22 +184,55 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -208,6 +241,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.4.xml b/demo/local-dependencies/example-results/bare/bom.1.4.xml index fe8ab521f..2efa41760 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.4.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -134,20 +134,45 @@ true - - DummyComponent.InterferedDependency.my-noname - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.5.json b/demo/local-dependencies/example-results/bare/bom.1.5.json index 00285bccd..9abbe0f41 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.5.json +++ b/demo/local-dependencies/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -184,22 +184,55 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -208,6 +241,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.5.xml b/demo/local-dependencies/example-results/bare/bom.1.5.xml index 7c43021b3..f71daa3df 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.5.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -134,20 +134,45 @@ true - - DummyComponent.InterferedDependency.my-noname - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.6.json b/demo/local-dependencies/example-results/bare/bom.1.6.json index 5f935c60d..569d86a44 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.6.json +++ b/demo/local-dependencies/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -187,22 +187,56 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -211,6 +245,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/bare/bom.1.6.xml b/demo/local-dependencies/example-results/bare/bom.1.6.xml index a9baed3cf..e6ba1ca39 100644 --- a/demo/local-dependencies/example-results/bare/bom.1.6.xml +++ b/demo/local-dependencies/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -134,20 +134,45 @@ true - - DummyComponent.InterferedDependency.my-noname - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.2.json b/demo/local-dependencies/example-results/flat/bom.1.2.json index 1c2741916..d1944575c 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.2.json +++ b/demo/local-dependencies/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -120,23 +120,45 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "version": "", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -145,6 +167,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.2.xml b/demo/local-dependencies/example-results/flat/bom.1.2.xml index eb837d88c..3a2226cf2 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.2.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -94,21 +94,41 @@ - - DummyComponent.InterferedDependency.my-noname - - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.3.json b/demo/local-dependencies/example-results/flat/bom.1.3.json index a8ece6ba7..f34f5de32 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.3.json +++ b/demo/local-dependencies/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -150,23 +150,55 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "version": "", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -175,6 +207,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.3.xml b/demo/local-dependencies/example-results/flat/bom.1.3.xml index 818a7d87e..39a16cb23 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.3.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -106,21 +106,45 @@ true - - DummyComponent.InterferedDependency.my-noname - - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.4.json b/demo/local-dependencies/example-results/flat/bom.1.4.json index ea02d179f..aef824b5b 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.4.json +++ b/demo/local-dependencies/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -184,22 +184,55 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -208,6 +241,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.4.xml b/demo/local-dependencies/example-results/flat/bom.1.4.xml index fe8ab521f..2efa41760 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.4.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -134,20 +134,45 @@ true - - DummyComponent.InterferedDependency.my-noname - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.5.json b/demo/local-dependencies/example-results/flat/bom.1.5.json index 00285bccd..9abbe0f41 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.5.json +++ b/demo/local-dependencies/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -184,22 +184,55 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -208,6 +241,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.5.xml b/demo/local-dependencies/example-results/flat/bom.1.5.xml index 7c43021b3..f71daa3df 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.5.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -134,20 +134,45 @@ true - - DummyComponent.InterferedDependency.my-noname - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.6.json b/demo/local-dependencies/example-results/flat/bom.1.6.json index 5f935c60d..569d86a44 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.6.json +++ b/demo/local-dependencies/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -187,22 +187,56 @@ }, { "type": "library", - "name": "DummyComponent.InterferedDependency.my-noname", - "bom-ref": "DummyComponent.InterferedDependency.my-noname", - "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "description": "demo: with no/empty name", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ { "ref": "demo-local-deps@0.0.0", "dependsOn": [ - "DummyComponent.InterferedDependency.my-noname", - "my-local-a@0.0.0" + "my-local-a@0.0.0", + "my-noname@0.0.0" ] }, - { - "ref": "DummyComponent.InterferedDependency.my-noname" - }, { "ref": "my-local-a@0.0.0", "dependsOn": [ @@ -211,6 +245,9 @@ }, { "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" } ] } \ No newline at end of file diff --git a/demo/local-dependencies/example-results/flat/bom.1.6.xml b/demo/local-dependencies/example-results/flat/bom.1.6.xml index a9baed3cf..e6ba1ca39 100644 --- a/demo/local-dependencies/example-results/flat/bom.1.6.xml +++ b/demo/local-dependencies/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -134,20 +134,45 @@ true - - DummyComponent.InterferedDependency.my-noname - This is a dummy component "InterferedDependency.my-noname" that fills the gap where the actual built failed. + + my-noname + 0.0.0 + demo: with no/empty name + + + Apache-2.0 + + + pkg:npm/my-noname@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + + + https://github.com/CycloneDX/cyclonedx-node-npm/issues + as detected from PackageJson property "bugs.url" + + + git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-noname + as detected from PackageJson property "repository.url" and "repository.directory" + + + https://github.com/CycloneDX/cyclonedx-node-npm#readme + as detected from PackageJson property "homepage" + + + + node_modules/my-noname + true + - + - + \ No newline at end of file diff --git a/demo/local-dependencies/project/packages/my-local-e/.gitignore b/demo/local-dependencies/project/packages/my-local-e/.gitignore new file mode 100644 index 000000000..1a63dd039 --- /dev/null +++ b/demo/local-dependencies/project/packages/my-local-e/.gitignore @@ -0,0 +1,4 @@ +/* +!/.gitignore +!/package.json +!/README.md diff --git a/demo/local-dependencies/project/packages/my-local-e/package.json b/demo/local-dependencies/project/packages/my-local-e/package.json new file mode 100644 index 000000000..0b5003021 --- /dev/null +++ b/demo/local-dependencies/project/packages/my-local-e/package.json @@ -0,0 +1,12 @@ +{ + "name": "my-local-e", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other package", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-deps/project/packages/my-local-e" + } +} diff --git a/demo/local-workspaces/example-results/bare/bom.1.2.json b/demo/local-workspaces/example-results/bare/bom.1.2.json index abf8b8115..43d6a6d1f 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.2.json +++ b/demo/local-workspaces/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -109,6 +109,28 @@ "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ] } ], "dependencies": [ @@ -117,7 +139,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -135,6 +158,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.2.xml b/demo/local-workspaces/example-results/bare/bom.1.2.xml index 73013875e..1cccb9dc3 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.2.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -87,12 +87,30 @@ + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + @@ -102,5 +120,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.3.json b/demo/local-workspaces/example-results/bare/bom.1.3.json index f14da376a..ab76c3214 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.3.json +++ b/demo/local-workspaces/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -149,6 +149,38 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -157,7 +189,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -175,6 +208,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.3.xml b/demo/local-workspaces/example-results/bare/bom.1.3.xml index 61b066a7a..c5bdeec39 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.3.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -103,12 +103,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -118,5 +140,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.4.json b/demo/local-workspaces/example-results/bare/bom.1.4.json index fb3da211d..031b776dc 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.4.json +++ b/demo/local-workspaces/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -183,6 +183,38 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -191,7 +223,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -209,6 +242,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.4.xml b/demo/local-workspaces/example-results/bare/bom.1.4.xml index 71917ad71..10e6f4ef0 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.4.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.5.json b/demo/local-workspaces/example-results/bare/bom.1.5.json index fb17e4ae7..4c93b28b3 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.5.json +++ b/demo/local-workspaces/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -183,6 +183,38 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -191,7 +223,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -209,6 +242,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.5.xml b/demo/local-workspaces/example-results/bare/bom.1.5.xml index 6eb259628..fb736c64c 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.5.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.6.json b/demo/local-workspaces/example-results/bare/bom.1.6.json index d197e1bee..5115c429f 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.6.json +++ b/demo/local-workspaces/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -187,6 +187,39 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -195,7 +228,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -213,6 +247,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/bare/bom.1.6.xml b/demo/local-workspaces/example-results/bare/bom.1.6.xml index 9f9f67e08..c6e55d6a6 100644 --- a/demo/local-workspaces/example-results/bare/bom.1.6.xml +++ b/demo/local-workspaces/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.2.json b/demo/local-workspaces/example-results/flat/bom.1.2.json index abf8b8115..43d6a6d1f 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.2.json +++ b/demo/local-workspaces/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -109,6 +109,28 @@ "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ] } ], "dependencies": [ @@ -117,7 +139,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -135,6 +158,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.2.xml b/demo/local-workspaces/example-results/flat/bom.1.2.xml index 73013875e..1cccb9dc3 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.2.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -87,12 +87,30 @@ + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + @@ -102,5 +120,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.3.json b/demo/local-workspaces/example-results/flat/bom.1.3.json index f14da376a..ab76c3214 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.3.json +++ b/demo/local-workspaces/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { @@ -149,6 +149,38 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -157,7 +189,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -175,6 +208,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.3.xml b/demo/local-workspaces/example-results/flat/bom.1.3.xml index 61b066a7a..c5bdeec39 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.3.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 @@ -103,12 +103,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -118,5 +140,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.4.json b/demo/local-workspaces/example-results/flat/bom.1.4.json index fb3da211d..031b776dc 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.4.json +++ b/demo/local-workspaces/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -183,6 +183,38 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -191,7 +223,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -209,6 +242,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.4.xml b/demo/local-workspaces/example-results/flat/bom.1.4.xml index 71917ad71..10e6f4ef0 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.4.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.5.json b/demo/local-workspaces/example-results/flat/bom.1.5.json index fb17e4ae7..4c93b28b3 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.5.json +++ b/demo/local-workspaces/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -183,6 +183,38 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -191,7 +223,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -209,6 +242,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.5.xml b/demo/local-workspaces/example-results/flat/bom.1.5.xml index 6eb259628..fb736c64c 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.5.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.6.json b/demo/local-workspaces/example-results/flat/bom.1.6.json index d197e1bee..5115c429f 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.6.json +++ b/demo/local-workspaces/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -187,6 +187,39 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -195,7 +228,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -213,6 +247,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/demo/local-workspaces/example-results/flat/bom.1.6.xml b/demo/local-workspaces/example-results/flat/bom.1.6.xml index 9f9f67e08..c6e55d6a6 100644 --- a/demo/local-workspaces/example-results/flat/bom.1.6.xml +++ b/demo/local-workspaces/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/demo/local-workspaces/project/workspaces/my-local-e/.gitignore b/demo/local-workspaces/project/workspaces/my-local-e/.gitignore new file mode 100644 index 000000000..1a63dd039 --- /dev/null +++ b/demo/local-workspaces/project/workspaces/my-local-e/.gitignore @@ -0,0 +1,4 @@ +/* +!/.gitignore +!/package.json +!/README.md diff --git a/demo/local-workspaces/project/workspaces/my-local-e/package.json b/demo/local-workspaces/project/workspaces/my-local-e/package.json new file mode 100644 index 000000000..9386b49cf --- /dev/null +++ b/demo/local-workspaces/project/workspaces/my-local-e/package.json @@ -0,0 +1,12 @@ +{ + "private": true, + "name": "my-local-e", + "version": "0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git", + "directory": "workspaces/my-local-e" + } +} diff --git a/demo/package-integrity/example-results/bare/bom.1.2.json b/demo/package-integrity/example-results/bare/bom.1.2.json index 81b9d6d95..b3b7e1662 100644 --- a/demo/package-integrity/example-results/bare/bom.1.2.json +++ b/demo/package-integrity/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-integrity/example-results/bare/bom.1.2.xml b/demo/package-integrity/example-results/bare/bom.1.2.xml index 93d7dde05..a36047a83 100644 --- a/demo/package-integrity/example-results/bare/bom.1.2.xml +++ b/demo/package-integrity/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-integrity/example-results/bare/bom.1.3.json b/demo/package-integrity/example-results/bare/bom.1.3.json index f7ecad898..14deed377 100644 --- a/demo/package-integrity/example-results/bare/bom.1.3.json +++ b/demo/package-integrity/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-integrity/example-results/bare/bom.1.3.xml b/demo/package-integrity/example-results/bare/bom.1.3.xml index b30346e0e..ed8b96ddf 100644 --- a/demo/package-integrity/example-results/bare/bom.1.3.xml +++ b/demo/package-integrity/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-integrity/example-results/bare/bom.1.4.json b/demo/package-integrity/example-results/bare/bom.1.4.json index c59a75673..0a9dd33ea 100644 --- a/demo/package-integrity/example-results/bare/bom.1.4.json +++ b/demo/package-integrity/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-integrity/example-results/bare/bom.1.4.xml b/demo/package-integrity/example-results/bare/bom.1.4.xml index b531ad664..928314a41 100644 --- a/demo/package-integrity/example-results/bare/bom.1.4.xml +++ b/demo/package-integrity/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-integrity/example-results/bare/bom.1.5.json b/demo/package-integrity/example-results/bare/bom.1.5.json index 40d7f60b0..5f93a8898 100644 --- a/demo/package-integrity/example-results/bare/bom.1.5.json +++ b/demo/package-integrity/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-integrity/example-results/bare/bom.1.5.xml b/demo/package-integrity/example-results/bare/bom.1.5.xml index 5b35112d4..ab034f264 100644 --- a/demo/package-integrity/example-results/bare/bom.1.5.xml +++ b/demo/package-integrity/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-integrity/example-results/bare/bom.1.6.json b/demo/package-integrity/example-results/bare/bom.1.6.json index 9654428ef..1b70118da 100644 --- a/demo/package-integrity/example-results/bare/bom.1.6.json +++ b/demo/package-integrity/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-integrity/example-results/bare/bom.1.6.xml b/demo/package-integrity/example-results/bare/bom.1.6.xml index c2d078a4e..c95719bd0 100644 --- a/demo/package-integrity/example-results/bare/bom.1.6.xml +++ b/demo/package-integrity/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-integrity/example-results/flat/bom.1.2.json b/demo/package-integrity/example-results/flat/bom.1.2.json index afb2602f5..906e9b505 100644 --- a/demo/package-integrity/example-results/flat/bom.1.2.json +++ b/demo/package-integrity/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-integrity/example-results/flat/bom.1.2.xml b/demo/package-integrity/example-results/flat/bom.1.2.xml index 07ec8a46d..76243d58d 100644 --- a/demo/package-integrity/example-results/flat/bom.1.2.xml +++ b/demo/package-integrity/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-integrity/example-results/flat/bom.1.3.json b/demo/package-integrity/example-results/flat/bom.1.3.json index 36729a01d..6849605d1 100644 --- a/demo/package-integrity/example-results/flat/bom.1.3.json +++ b/demo/package-integrity/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-integrity/example-results/flat/bom.1.3.xml b/demo/package-integrity/example-results/flat/bom.1.3.xml index d27817767..25b8da91f 100644 --- a/demo/package-integrity/example-results/flat/bom.1.3.xml +++ b/demo/package-integrity/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-integrity/example-results/flat/bom.1.4.json b/demo/package-integrity/example-results/flat/bom.1.4.json index df4e357ba..5ab5dcde8 100644 --- a/demo/package-integrity/example-results/flat/bom.1.4.json +++ b/demo/package-integrity/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-integrity/example-results/flat/bom.1.4.xml b/demo/package-integrity/example-results/flat/bom.1.4.xml index 9163beeb4..215c4dafd 100644 --- a/demo/package-integrity/example-results/flat/bom.1.4.xml +++ b/demo/package-integrity/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-integrity/example-results/flat/bom.1.5.json b/demo/package-integrity/example-results/flat/bom.1.5.json index 213e8c3e2..347be0cd4 100644 --- a/demo/package-integrity/example-results/flat/bom.1.5.json +++ b/demo/package-integrity/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-integrity/example-results/flat/bom.1.5.xml b/demo/package-integrity/example-results/flat/bom.1.5.xml index 748daf570..f5aec2755 100644 --- a/demo/package-integrity/example-results/flat/bom.1.5.xml +++ b/demo/package-integrity/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-integrity/example-results/flat/bom.1.6.json b/demo/package-integrity/example-results/flat/bom.1.6.json index 47bbeadbf..a973ed1e8 100644 --- a/demo/package-integrity/example-results/flat/bom.1.6.json +++ b/demo/package-integrity/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-integrity/example-results/flat/bom.1.6.xml b/demo/package-integrity/example-results/flat/bom.1.6.xml index 2610ca684..730208979 100644 --- a/demo/package-integrity/example-results/flat/bom.1.6.xml +++ b/demo/package-integrity/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-with-build-id/example-results/bare/bom.1.2.json b/demo/package-with-build-id/example-results/bare/bom.1.2.json index 624a1f90c..60ee28eb6 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.2.json +++ b/demo/package-with-build-id/example-results/bare/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-with-build-id/example-results/bare/bom.1.2.xml b/demo/package-with-build-id/example-results/bare/bom.1.2.xml index 8720e7889..d494acd46 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.2.xml +++ b/demo/package-with-build-id/example-results/bare/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-with-build-id/example-results/bare/bom.1.3.json b/demo/package-with-build-id/example-results/bare/bom.1.3.json index 65c0fb6d4..de4344c4f 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.3.json +++ b/demo/package-with-build-id/example-results/bare/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-with-build-id/example-results/bare/bom.1.3.xml b/demo/package-with-build-id/example-results/bare/bom.1.3.xml index 2c0ea1be2..cce20c48d 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.3.xml +++ b/demo/package-with-build-id/example-results/bare/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-with-build-id/example-results/bare/bom.1.4.json b/demo/package-with-build-id/example-results/bare/bom.1.4.json index af659b848..2f6496dfc 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.4.json +++ b/demo/package-with-build-id/example-results/bare/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-with-build-id/example-results/bare/bom.1.4.xml b/demo/package-with-build-id/example-results/bare/bom.1.4.xml index 4ce26020c..77cc94c1e 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.4.xml +++ b/demo/package-with-build-id/example-results/bare/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-with-build-id/example-results/bare/bom.1.5.json b/demo/package-with-build-id/example-results/bare/bom.1.5.json index 88f2f7ed0..ed8a27a1a 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.5.json +++ b/demo/package-with-build-id/example-results/bare/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-with-build-id/example-results/bare/bom.1.5.xml b/demo/package-with-build-id/example-results/bare/bom.1.5.xml index 1de0bac65..318515429 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.5.xml +++ b/demo/package-with-build-id/example-results/bare/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-with-build-id/example-results/bare/bom.1.6.json b/demo/package-with-build-id/example-results/bare/bom.1.6.json index cbbbee810..a72a94398 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.6.json +++ b/demo/package-with-build-id/example-results/bare/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-with-build-id/example-results/bare/bom.1.6.xml b/demo/package-with-build-id/example-results/bare/bom.1.6.xml index 4fd70fe16..42d68b6c8 100644 --- a/demo/package-with-build-id/example-results/bare/bom.1.6.xml +++ b/demo/package-with-build-id/example-results/bare/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-with-build-id/example-results/flat/bom.1.2.json b/demo/package-with-build-id/example-results/flat/bom.1.2.json index 624a1f90c..60ee28eb6 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.2.json +++ b/demo/package-with-build-id/example-results/flat/bom.1.2.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-with-build-id/example-results/flat/bom.1.2.xml b/demo/package-with-build-id/example-results/flat/bom.1.2.xml index 8720e7889..d494acd46 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.2.xml +++ b/demo/package-with-build-id/example-results/flat/bom.1.2.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-with-build-id/example-results/flat/bom.1.3.json b/demo/package-with-build-id/example-results/flat/bom.1.3.json index 65c0fb6d4..de4344c4f 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.3.json +++ b/demo/package-with-build-id/example-results/flat/bom.1.3.json @@ -12,12 +12,12 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1" + "version": "6.11.0" }, { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0" + "version": "1.19.3" } ], "component": { diff --git a/demo/package-with-build-id/example-results/flat/bom.1.3.xml b/demo/package-with-build-id/example-results/flat/bom.1.3.xml index 2c0ea1be2..cce20c48d 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.3.xml +++ b/demo/package-with-build-id/example-results/flat/bom.1.3.xml @@ -9,12 +9,12 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 diff --git a/demo/package-with-build-id/example-results/flat/bom.1.4.json b/demo/package-with-build-id/example-results/flat/bom.1.4.json index af659b848..2f6496dfc 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.4.json +++ b/demo/package-with-build-id/example-results/flat/bom.1.4.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-with-build-id/example-results/flat/bom.1.4.xml b/demo/package-with-build-id/example-results/flat/bom.1.4.xml index 4ce26020c..77cc94c1e 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.4.xml +++ b/demo/package-with-build-id/example-results/flat/bom.1.4.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-with-build-id/example-results/flat/bom.1.5.json b/demo/package-with-build-id/example-results/flat/bom.1.5.json index 88f2f7ed0..ed8a27a1a 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.5.json +++ b/demo/package-with-build-id/example-results/flat/bom.1.5.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-with-build-id/example-results/flat/bom.1.5.xml b/demo/package-with-build-id/example-results/flat/bom.1.5.xml index 1de0bac65..318515429 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.5.xml +++ b/demo/package-with-build-id/example-results/flat/bom.1.5.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/demo/package-with-build-id/example-results/flat/bom.1.6.json b/demo/package-with-build-id/example-results/flat/bom.1.6.json index cbbbee810..a72a94398 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.6.json +++ b/demo/package-with-build-id/example-results/flat/bom.1.6.json @@ -12,7 +12,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-library", - "version": "6.10.1", + "version": "6.11.0", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", @@ -34,7 +34,7 @@ { "vendor": "@cyclonedx", "name": "cyclonedx-npm", - "version": "1.19.0", + "version": "1.19.3", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", diff --git a/demo/package-with-build-id/example-results/flat/bom.1.6.xml b/demo/package-with-build-id/example-results/flat/bom.1.6.xml index 4fd70fe16..42d68b6c8 100644 --- a/demo/package-with-build-id/example-results/flat/bom.1.6.xml +++ b/demo/package-with-build-id/example-results/flat/bom.1.6.xml @@ -9,7 +9,7 @@ @cyclonedx cyclonedx-library - 6.10.1 + 6.11.0 https://github.com/CycloneDX/cyclonedx-javascript-library/issues @@ -28,7 +28,7 @@ @cyclonedx cyclonedx-npm - 1.19.0 + 1.19.3 https://github.com/CycloneDX/cyclonedx-node-npm/issues diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_macos-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_macos-latest.json index f89952679..a301f39d7 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_macos-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_macos-latest.json @@ -4,6 +4,11 @@ "description": "demo: demo-local-deps -- showcase how local dependencies look like", "private": true, "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, "_id": "demo-local-deps@0.0.0", "extraneous": false, "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", @@ -33,9 +38,9 @@ "version": "0.0.0", "resolved": "file:../packages/my-local-b", "overridden": false, - "name": "my-local-b", + "name": "my-local-b-off", "license": "Apache-2.0", - "_id": "my-local-b@0.0.0", + "_id": "my-local-b-off@0.0.0", "extraneous": false, "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-b-off", "_dependencies": {}, diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_ubuntu-latest.json index 214dd0a13..f34ec0746 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_ubuntu-latest.json @@ -4,6 +4,11 @@ "description": "demo: demo-local-deps -- showcase how local dependencies look like", "private": true, "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, "_id": "demo-local-deps@0.0.0", "extraneous": false, "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", @@ -33,9 +38,9 @@ "version": "0.0.0", "resolved": "file:../packages/my-local-b", "overridden": false, - "name": "my-local-b", + "name": "my-local-b-off", "license": "Apache-2.0", - "_id": "my-local-b@0.0.0", + "_id": "my-local-b-off@0.0.0", "extraneous": false, "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-b-off", "_dependencies": {}, diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_windows-latest.json index ebbf02100..e942cbaf2 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node18_windows-latest.json @@ -1,61 +1,66 @@ -{ - "version": "0.0.0", - "name": "demo-local-deps", - "description": "demo: demo-local-deps -- showcase how local dependencies look like", - "private": true, - "license": "Apache-2.0", - "_id": "demo-local-deps@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_dependencies": { - "my-local-a": "file:packages/my-local-a", - "my-noname": "file:packages/my-noname" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-a", - "overridden": false, - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "file:../my-local-b" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-b", - "overridden": false, - "name": "my-local-b", - "license": "Apache-2.0", - "_id": "my-local-b@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-noname": { - "version": "0.0.0", - "resolved": "file:../packages/my-noname", - "overridden": false, - "name": "my-noname", - "license": "Apache-2.0", - "_id": "my-noname@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } -} +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node22_windows-latest.json new file mode 100644 index 000000000..9ef274ca7 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm10_node22_windows-latest.json @@ -0,0 +1,66 @@ +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_ubuntu-latest.json index 1842b527c..f7f8e5eb5 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_ubuntu-latest.json @@ -4,6 +4,11 @@ "private": true, "version": "0.0.0", "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project" + }, "dependencies": { "my-local-a": { "name": "my-local-a", @@ -23,7 +28,16 @@ "private": true, "version": "0.0.0", "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-local-b" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", "_id": "my-local-b-off@0.0.0", "_requested": { "type": "directory", @@ -93,7 +107,16 @@ "private": true, "version": "0.0.0", "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-noname" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", "_id": "@0.0.0", "_requested": { "type": "directory", @@ -123,7 +146,11 @@ "link": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-noname" } }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", "_id": "demo-local-deps@0.0.0", "_shrinkwrap": { "name": "demo-local-deps", diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_windows-latest.json index fe1ed3e2a..3b415a591 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node14_windows-latest.json @@ -1,157 +1,184 @@ -{ - "name": "demo-local-deps", - "description": "demo: demo-local-deps -- showcase how local dependencies look like", - "private": true, - "version": "0.0.0", - "license": "Apache-2.0", - "dependencies": { - "my-local-a": { - "name": "my-local-a", - "description": "demo: my-local-a", - "private": true, - "version": "0.0.0", - "license": "Apache-2.0", - "repository": { - "type": "git", - "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", - "directory": "demo/local-deps/project/packages/my-local-a" - }, - "dependencies": { - "my-local-b-off": { - "name": "my-local-b-off", - "description": "demo: my-local-b-off - a package with a different name than its dir", - "private": true, - "version": "0.0.0", - "license": "Apache-2.0", - "readme": "ERROR: No README data found!", - "_id": "my-local-b-off@0.0.0", - "_requested": { - "type": "directory", - "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "raw": "my-local-b-off@file:packages/my-local-b", - "name": "my-local-b-off", - "escapedName": "my-local-b-off", - "rawSpec": "file:packages/my-local-b", - "saveSpec": "file:packages\\my-local-b", - "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-b" - }, - "_spec": "file:packages/my-local-b", - "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_args": [ - [ - "my-local-b-off@file:packages\\my-local-b", - "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" - ] - ], - "dependencies": {}, - "devDependencies": {}, - "optionalDependencies": {}, - "_dependencies": {}, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", - "error": null, - "extraneous": false, - "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-b" - } - }, - "bugs": { - "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" - }, - "readme": "ERROR: No README data found!", - "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", - "_id": "my-local-a@0.0.0", - "_requested": { - "type": "directory", - "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "raw": "my-local-a@file:packages/my-local-a", - "name": "my-local-a", - "escapedName": "my-local-a", - "rawSpec": "file:packages/my-local-a", - "saveSpec": "file:packages\\my-local-a", - "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-a" - }, - "_spec": "file:packages/my-local-a", - "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_args": [ - [ - "my-local-a@file:packages\\my-local-a", - "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" - ] - ], - "devDependencies": {}, - "optionalDependencies": {}, - "_dependencies": { - "my-local-b-off": "file:../my-local-b" - }, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", - "error": "[Circular]", - "extraneous": false, - "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-a" - }, - "my-noname": { - "name": "", - "description": "demo: with no/empty name", - "private": true, - "version": "0.0.0", - "license": "Apache-2.0", - "readme": "ERROR: No README data found!", - "_id": "@0.0.0", - "_requested": { - "type": "directory", - "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "raw": "my-noname@file:packages/my-noname", - "name": "my-noname", - "escapedName": "my-noname", - "rawSpec": "file:packages/my-noname", - "saveSpec": "file:packages\\my-noname", - "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-noname" - }, - "_spec": "file:packages/my-noname", - "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_args": [ - [ - "my-noname@file:packages\\my-noname", - "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" - ] - ], - "dependencies": {}, - "devDependencies": {}, - "optionalDependencies": {}, - "_dependencies": {}, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", - "error": "[Circular]", - "extraneous": false, - "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-noname" - } - }, - "readme": "ERROR: No README data found!", - "_id": "demo-local-deps@0.0.0", - "_shrinkwrap": { - "name": "demo-local-deps", - "version": "0.0.0", - "lockfileVersion": 1, - "requires": true, - "dependencies": { - "my-local-a": { - "version": "file:packages/my-local-a", - "requires": { - "my-local-b-off": "file:..\\my-local-b" - } - }, - "my-local-b-off": { - "version": "file:packages/my-local-b" - }, - "my-noname": { - "version": "file:packages/my-noname" - } - } - }, - "devDependencies": {}, - "optionalDependencies": {}, - "_dependencies": { - "my-local-a": "file:packages/my-local-a", - "my-noname": "file:packages/my-noname" - }, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "error": "[Circular]", - "extraneous": false -} +{ + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project" + }, + "dependencies": { + "my-local-a": { + "name": "my-local-a", + "description": "demo: my-local-a", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-deps/project/packages/my-local-a" + }, + "dependencies": { + "my-local-b-off": { + "name": "my-local-b-off", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-local-b" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "my-local-b-off@0.0.0", + "_requested": { + "type": "directory", + "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "raw": "my-local-b-off@file:packages/my-local-b", + "name": "my-local-b-off", + "escapedName": "my-local-b-off", + "rawSpec": "file:packages/my-local-b", + "saveSpec": "file:packages\\my-local-b", + "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-b" + }, + "_spec": "file:packages/my-local-b", + "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_args": [ + [ + "my-local-b-off@file:packages\\my-local-b", + "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" + ] + ], + "dependencies": {}, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": {}, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "error": null, + "extraneous": false, + "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-b" + } + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "my-local-a@0.0.0", + "_requested": { + "type": "directory", + "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "raw": "my-local-a@file:packages/my-local-a", + "name": "my-local-a", + "escapedName": "my-local-a", + "rawSpec": "file:packages/my-local-a", + "saveSpec": "file:packages\\my-local-a", + "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-a" + }, + "_spec": "file:packages/my-local-a", + "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_args": [ + [ + "my-local-a@file:packages\\my-local-a", + "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" + ] + ], + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "error": "[Circular]", + "extraneous": false, + "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-a" + }, + "my-noname": { + "name": "", + "description": "demo: with no/empty name", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-noname" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "@0.0.0", + "_requested": { + "type": "directory", + "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "raw": "my-noname@file:packages/my-noname", + "name": "my-noname", + "escapedName": "my-noname", + "rawSpec": "file:packages/my-noname", + "saveSpec": "file:packages\\my-noname", + "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-noname" + }, + "_spec": "file:packages/my-noname", + "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_args": [ + [ + "my-noname@file:packages\\my-noname", + "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" + ] + ], + "dependencies": {}, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": {}, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "error": "[Circular]", + "extraneous": false, + "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-noname" + } + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "demo-local-deps@0.0.0", + "_shrinkwrap": { + "name": "demo-local-deps", + "version": "0.0.0", + "lockfileVersion": 1, + "requires": true, + "dependencies": { + "my-local-a": { + "version": "file:packages/my-local-a", + "requires": { + "my-local-b-off": "file:..\\my-local-b" + } + }, + "my-local-b-off": { + "version": "file:packages/my-local-b" + }, + "my-noname": { + "version": "file:packages/my-noname" + } + } + }, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "error": "[Circular]", + "extraneous": false +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node16_macos-latest.json new file mode 100644 index 000000000..ab7b8901a --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node16_macos-latest.json @@ -0,0 +1,184 @@ +{ + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project" + }, + "dependencies": { + "my-local-a": { + "name": "my-local-a", + "description": "demo: my-local-a", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-deps/project/packages/my-local-a" + }, + "dependencies": { + "my-local-b-off": { + "name": "my-local-b-off", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-local-b" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "my-local-b-off@0.0.0", + "_requested": { + "type": "directory", + "where": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "raw": "my-local-b-off@file:packages/my-local-b", + "name": "my-local-b-off", + "escapedName": "my-local-b-off", + "rawSpec": "file:packages/my-local-b", + "saveSpec": "file:packages/my-local-b", + "fetchSpec": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-local-b" + }, + "_spec": "file:packages/my-local-b", + "_where": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "_args": [ + [ + "my-local-b-off@file:packages/my-local-b", + "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project" + ] + ], + "dependencies": {}, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": {}, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-b-off", + "error": null, + "extraneous": false, + "link": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-local-b" + } + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "my-local-a@0.0.0", + "_requested": { + "type": "directory", + "where": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "raw": "my-local-a@file:packages/my-local-a", + "name": "my-local-a", + "escapedName": "my-local-a", + "rawSpec": "file:packages/my-local-a", + "saveSpec": "file:packages/my-local-a", + "fetchSpec": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-local-a" + }, + "_spec": "file:packages/my-local-a", + "_where": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "_args": [ + [ + "my-local-a@file:packages/my-local-a", + "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project" + ] + ], + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-a", + "error": "[Circular]", + "extraneous": false, + "link": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-local-a" + }, + "my-noname": { + "name": "", + "description": "demo: with no/empty name", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-noname" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "@0.0.0", + "_requested": { + "type": "directory", + "where": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "raw": "my-noname@file:packages/my-noname", + "name": "my-noname", + "escapedName": "my-noname", + "rawSpec": "file:packages/my-noname", + "saveSpec": "file:packages/my-noname", + "fetchSpec": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-noname" + }, + "_spec": "file:packages/my-noname", + "_where": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "_args": [ + [ + "my-noname@file:packages/my-noname", + "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project" + ] + ], + "dependencies": {}, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": {}, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-noname", + "error": "[Circular]", + "extraneous": false, + "link": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/packages/my-noname" + } + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "demo-local-deps@0.0.0", + "_shrinkwrap": { + "name": "demo-local-deps", + "version": "0.0.0", + "lockfileVersion": 1, + "requires": true, + "dependencies": { + "my-local-a": { + "version": "file:packages/my-local-a", + "requires": { + "my-local-b-off": "file:../my-local-b" + } + }, + "my-local-b-off": { + "version": "file:packages/my-local-b" + }, + "my-noname": { + "version": "file:packages/my-noname" + } + } + }, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "error": "[Circular]", + "extraneous": false +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node22_windows-latest.json new file mode 100644 index 000000000..d2b5ef4d4 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm6_node22_windows-latest.json @@ -0,0 +1,184 @@ +{ + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project" + }, + "dependencies": { + "my-local-a": { + "name": "my-local-a", + "description": "demo: my-local-a", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-deps/project/packages/my-local-a" + }, + "dependencies": { + "my-local-b-off": { + "name": "my-local-b-off", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-local-b" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "my-local-b-off@0.0.0", + "_requested": { + "type": "directory", + "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "raw": "my-local-b-off@file:packages/my-local-b", + "name": "my-local-b-off", + "escapedName": "my-local-b-off", + "rawSpec": "file:packages/my-local-b", + "saveSpec": "file:packages\\my-local-b", + "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-b" + }, + "_spec": "file:packages/my-local-b", + "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_args": [ + [ + "my-local-b-off@file:packages\\my-local-b", + "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" + ] + ], + "dependencies": {}, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": {}, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "error": null, + "extraneous": false, + "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-b" + } + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "my-local-a@0.0.0", + "_requested": { + "type": "directory", + "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "raw": "my-local-a@file:packages/my-local-a", + "name": "my-local-a", + "escapedName": "my-local-a", + "rawSpec": "file:packages/my-local-a", + "saveSpec": "file:packages\\my-local-a", + "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-a" + }, + "_spec": "file:packages/my-local-a", + "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_args": [ + [ + "my-local-a@file:packages\\my-local-a", + "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" + ] + ], + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "error": "[Circular]", + "extraneous": false, + "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-local-a" + }, + "my-noname": { + "name": "", + "description": "demo: with no/empty name", + "private": true, + "version": "0.0.0", + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git", + "directory": "demo/local-dependencies/project/packages/my-noname" + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "@0.0.0", + "_requested": { + "type": "directory", + "where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "raw": "my-noname@file:packages/my-noname", + "name": "my-noname", + "escapedName": "my-noname", + "rawSpec": "file:packages/my-noname", + "saveSpec": "file:packages\\my-noname", + "fetchSpec": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-noname" + }, + "_spec": "file:packages/my-noname", + "_where": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_args": [ + [ + "my-noname@file:packages\\my-noname", + "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project" + ] + ], + "dependencies": {}, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": {}, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "error": "[Circular]", + "extraneous": false, + "link": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\packages\\my-noname" + } + }, + "bugs": { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues" + }, + "readme": "ERROR: No README data found!", + "homepage": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "_id": "demo-local-deps@0.0.0", + "_shrinkwrap": { + "name": "demo-local-deps", + "version": "0.0.0", + "lockfileVersion": 1, + "requires": true, + "dependencies": { + "my-local-a": { + "version": "file:packages/my-local-a", + "requires": { + "my-local-b-off": "file:..\\my-local-b" + } + }, + "my-local-b-off": { + "version": "file:packages/my-local-b" + }, + "my-noname": { + "version": "file:packages/my-noname" + } + } + }, + "devDependencies": {}, + "optionalDependencies": {}, + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "error": "[Circular]", + "extraneous": false +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_ubuntu-latest.json index a0ec399ce..7c3baa2bd 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_ubuntu-latest.json @@ -4,6 +4,11 @@ "description": "demo: demo-local-deps -- showcase how local dependencies look like", "private": true, "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, "_id": "demo-local-deps@0.0.0", "extraneous": false, "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_windows-latest.json index ed8ab0cda..afce9af31 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node14_windows-latest.json @@ -1,58 +1,63 @@ -{ - "version": "0.0.0", - "name": "demo-local-deps", - "description": "demo: demo-local-deps -- showcase how local dependencies look like", - "private": true, - "license": "Apache-2.0", - "_id": "demo-local-deps@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_dependencies": { - "my-local-a": "file:packages/my-local-a", - "my-noname": "file:packages/my-noname" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-a", - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "file:../my-local-b" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-b", - "name": "my-local-b", - "license": "Apache-2.0", - "_id": "my-local-b@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-noname": { - "version": "0.0.0", - "resolved": "file:../packages/my-noname", - "name": "my-noname", - "license": "Apache-2.0", - "_id": "my-noname@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } -} +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node16_macos-latest.json new file mode 100644 index 000000000..7409ca445 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node16_macos-latest.json @@ -0,0 +1,63 @@ +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node22_windows-latest.json new file mode 100644 index 000000000..354450e73 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm7_node22_windows-latest.json @@ -0,0 +1,63 @@ +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_ubuntu-latest.json index 214dd0a13..783f688ea 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_ubuntu-latest.json @@ -4,6 +4,11 @@ "description": "demo: demo-local-deps -- showcase how local dependencies look like", "private": true, "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, "_id": "demo-local-deps@0.0.0", "extraneous": false, "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_windows-latest.json index ebbf02100..18ddd4acf 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node14_windows-latest.json @@ -1,61 +1,66 @@ -{ - "version": "0.0.0", - "name": "demo-local-deps", - "description": "demo: demo-local-deps -- showcase how local dependencies look like", - "private": true, - "license": "Apache-2.0", - "_id": "demo-local-deps@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_dependencies": { - "my-local-a": "file:packages/my-local-a", - "my-noname": "file:packages/my-noname" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-a", - "overridden": false, - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "file:../my-local-b" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-b", - "overridden": false, - "name": "my-local-b", - "license": "Apache-2.0", - "_id": "my-local-b@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-noname": { - "version": "0.0.0", - "resolved": "file:../packages/my-noname", - "overridden": false, - "name": "my-noname", - "license": "Apache-2.0", - "_id": "my-noname@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } -} +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node16_macos-latest.json new file mode 100644 index 000000000..ccd670220 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node16_macos-latest.json @@ -0,0 +1,66 @@ +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project/node_modules/my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node22_windows-latest.json new file mode 100644 index 000000000..88cd32e5f --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm8_node22_windows-latest.json @@ -0,0 +1,66 @@ +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_macos-latest.json index f89952679..ccd670220 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_macos-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_macos-latest.json @@ -4,6 +4,11 @@ "description": "demo: demo-local-deps -- showcase how local dependencies look like", "private": true, "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, "_id": "demo-local-deps@0.0.0", "extraneous": false, "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_ubuntu-latest.json index 214dd0a13..783f688ea 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_ubuntu-latest.json @@ -4,6 +4,11 @@ "description": "demo: demo-local-deps -- showcase how local dependencies look like", "private": true, "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, "_id": "demo-local-deps@0.0.0", "extraneous": false, "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-dependencies/project", diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_windows-latest.json index ebbf02100..18ddd4acf 100644 --- a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node16_windows-latest.json @@ -1,61 +1,66 @@ -{ - "version": "0.0.0", - "name": "demo-local-deps", - "description": "demo: demo-local-deps -- showcase how local dependencies look like", - "private": true, - "license": "Apache-2.0", - "_id": "demo-local-deps@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", - "_dependencies": { - "my-local-a": "file:packages/my-local-a", - "my-noname": "file:packages/my-noname" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-a", - "overridden": false, - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "file:../my-local-b" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../packages/my-local-b", - "overridden": false, - "name": "my-local-b", - "license": "Apache-2.0", - "_id": "my-local-b@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-noname": { - "version": "0.0.0", - "resolved": "file:../packages/my-noname", - "overridden": false, - "name": "my-noname", - "license": "Apache-2.0", - "_id": "my-noname@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } -} +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node22_windows-latest.json new file mode 100644 index 000000000..88cd32e5f --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-dependencies/CI_results/npm-ls_npm9_node22_windows-latest.json @@ -0,0 +1,66 @@ +{ + "version": "0.0.0", + "name": "demo-local-deps", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "private": true, + "license": "Apache-2.0", + "repository": { + "type": "git", + "url": "github:CycloneDX/cyclonedx-node-npm", + "directory": "demo/local-dependencies/project" + }, + "_id": "demo-local-deps@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project", + "_dependencies": { + "my-local-a": "file:packages/my-local-a", + "my-noname": "file:packages/my-noname" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "file:../my-local-b" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../packages/my-local-b", + "overridden": false, + "name": "my-local-b", + "license": "Apache-2.0", + "_id": "my-local-b@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-noname": { + "version": "0.0.0", + "resolved": "file:../packages/my-noname", + "overridden": false, + "name": "my-noname", + "license": "Apache-2.0", + "_id": "my-noname@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-dependencies\\project\\node_modules\\my-noname", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_macos-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_macos-latest.json index 42d85832e..94d66cf2d 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_macos-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_macos-latest.json @@ -1,9 +1,10 @@ { "version": "0.0.0", "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", "workspaces": [ "workspaces/*" ], @@ -98,6 +99,19 @@ "peerDependencies": {} } } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} } } } diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_ubuntu-latest.json index 1075dfd95..1aebd408f 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_ubuntu-latest.json @@ -1,9 +1,10 @@ { "version": "0.0.0", "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", "workspaces": [ "workspaces/*" ], @@ -98,6 +99,19 @@ "peerDependencies": {} } } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} } } } diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_windows-latest.json index c7483e1e9..cdd6b57e1 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node18_windows-latest.json @@ -1,103 +1,117 @@ -{ - "version": "0.0.0", - "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", - "private": true, - "license": "Apache-2.0", - "workspaces": [ - "workspaces/*" - ], - "_id": "demo-workspaces@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", - "_dependencies": { - "my-local-a": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "resolved": "file:../workspaces/my-local-a", - "overridden": false, - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../workspaces/my-local-b", - "overridden": false, - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-c": { - "version": "0.23.42", - "resolved": "file:../workspaces/my-local", - "overridden": false, - "name": "my-local-c", - "license": "Apache-2.0", - "_id": "my-local-c@0.23.42", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", - "_dependencies": { - "my-local-a": "*", - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - } - } -} +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node22_windows-latest.json new file mode 100644 index 000000000..ac3464f69 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm10_node22_windows-latest.json @@ -0,0 +1,117 @@ +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_ubuntu-latest.json index a023e5a44..92eb50ea8 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_ubuntu-latest.json @@ -1,9 +1,10 @@ { "version": "0.0.0", "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", "workspaces": [ "workspaces/*" ], @@ -95,6 +96,18 @@ "peerDependencies": {} } } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} } } } diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_windows-latest.json index 5e40727cb..3e94b05f9 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node14_windows-latest.json @@ -1,100 +1,113 @@ -{ - "version": "0.0.0", - "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", - "private": true, - "license": "Apache-2.0", - "workspaces": [ - "workspaces/*" - ], - "_id": "demo-workspaces@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", - "_dependencies": { - "my-local-a": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "resolved": "file:../workspaces/my-local-a", - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../workspaces/my-local-b", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-c": { - "version": "0.23.42", - "resolved": "file:../workspaces/my-local", - "name": "my-local-c", - "license": "Apache-2.0", - "_id": "my-local-c@0.23.42", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", - "_dependencies": { - "my-local-a": "*", - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - } - } -} +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node16_macos-latest.json new file mode 100644 index 000000000..1b5c795f9 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node16_macos-latest.json @@ -0,0 +1,113 @@ +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node22_windows-latest.json new file mode 100644 index 000000000..46f4835b4 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm7_node22_windows-latest.json @@ -0,0 +1,113 @@ +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_ubuntu-latest.json index 1075dfd95..1aebd408f 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_ubuntu-latest.json @@ -1,9 +1,10 @@ { "version": "0.0.0", "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", "workspaces": [ "workspaces/*" ], @@ -98,6 +99,19 @@ "peerDependencies": {} } } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} } } } diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_windows-latest.json index c7483e1e9..cdd6b57e1 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node14_windows-latest.json @@ -1,103 +1,117 @@ -{ - "version": "0.0.0", - "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", - "private": true, - "license": "Apache-2.0", - "workspaces": [ - "workspaces/*" - ], - "_id": "demo-workspaces@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", - "_dependencies": { - "my-local-a": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "resolved": "file:../workspaces/my-local-a", - "overridden": false, - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../workspaces/my-local-b", - "overridden": false, - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-c": { - "version": "0.23.42", - "resolved": "file:../workspaces/my-local", - "overridden": false, - "name": "my-local-c", - "license": "Apache-2.0", - "_id": "my-local-c@0.23.42", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", - "_dependencies": { - "my-local-a": "*", - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - } - } -} +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node16_macos-latest.json new file mode 100644 index 000000000..94d66cf2d --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node16_macos-latest.json @@ -0,0 +1,117 @@ +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node22_windows-latest.json new file mode 100644 index 000000000..ac3464f69 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm8_node22_windows-latest.json @@ -0,0 +1,117 @@ +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_macos-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_macos-latest.json index 42d85832e..94d66cf2d 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_macos-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_macos-latest.json @@ -1,9 +1,10 @@ { "version": "0.0.0", "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", "workspaces": [ "workspaces/*" ], @@ -98,6 +99,19 @@ "peerDependencies": {} } } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/Users/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} } } } diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_ubuntu-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_ubuntu-latest.json index 1075dfd95..1aebd408f 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_ubuntu-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_ubuntu-latest.json @@ -1,9 +1,10 @@ { "version": "0.0.0", "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", "workspaces": [ "workspaces/*" ], @@ -98,6 +99,19 @@ "peerDependencies": {} } } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "/home/runner/work/cyclonedx-node-npm/cyclonedx-node-npm/demo/local-workspaces/project/node_modules/my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} } } } diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_windows-latest.json index c7483e1e9..cdd6b57e1 100644 --- a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_windows-latest.json +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node16_windows-latest.json @@ -1,103 +1,117 @@ -{ - "version": "0.0.0", - "name": "demo-workspaces", - "description": "demo: demo-workspaces -- showcase how workspaces look like", - "private": true, - "license": "Apache-2.0", - "workspaces": [ - "workspaces/*" - ], - "_id": "demo-workspaces@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", - "_dependencies": { - "my-local-a": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "resolved": "file:../workspaces/my-local-a", - "overridden": false, - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - }, - "my-local-b-off": { - "version": "0.0.0", - "resolved": "file:../workspaces/my-local-b", - "overridden": false, - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-c": { - "version": "0.23.42", - "resolved": "file:../workspaces/my-local", - "overridden": false, - "name": "my-local-c", - "license": "Apache-2.0", - "_id": "my-local-c@0.23.42", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", - "_dependencies": { - "my-local-a": "*", - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {}, - "dependencies": { - "my-local-a": { - "version": "0.1.0", - "name": "my-local-a", - "license": "Apache-2.0", - "_id": "my-local-a@0.1.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", - "_dependencies": { - "my-local-b-off": "*" - }, - "devDependencies": {}, - "peerDependencies": {} - }, - "my-local-b-off": { - "version": "0.0.0", - "name": "my-local-b-off", - "license": "Apache-2.0", - "_id": "my-local-b-off@0.0.0", - "extraneous": false, - "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", - "_dependencies": {}, - "devDependencies": {}, - "peerDependencies": {} - } - } - } - } -} +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node22_windows-latest.json b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node22_windows-latest.json new file mode 100644 index 000000000..ac3464f69 --- /dev/null +++ b/tests/_data/npm-ls_demo-results/local-workspaces/CI_results/npm-ls_npm9_node22_windows-latest.json @@ -0,0 +1,117 @@ +{ + "version": "0.0.0", + "name": "demo-workspaces", + "private": true, + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "license": "Apache-2.0", + "repository": "git@gitlab.example.com:my-packages/demo-workspaces.git", + "workspaces": [ + "workspaces/*" + ], + "_id": "demo-workspaces@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project", + "_dependencies": { + "my-local-a": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-a", + "overridden": false, + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-b-off": { + "version": "0.0.0", + "resolved": "file:../workspaces/my-local-b", + "overridden": false, + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-c": { + "version": "0.23.42", + "resolved": "file:../workspaces/my-local", + "overridden": false, + "name": "my-local-c", + "license": "Apache-2.0", + "_id": "my-local-c@0.23.42", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-c", + "_dependencies": { + "my-local-a": "*", + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {}, + "dependencies": { + "my-local-a": { + "version": "0.1.0", + "name": "my-local-a", + "license": "Apache-2.0", + "_id": "my-local-a@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-a", + "_dependencies": { + "my-local-b-off": "*" + }, + "devDependencies": {}, + "peerDependencies": {} + }, + "my-local-b-off": { + "version": "0.0.0", + "name": "my-local-b-off", + "license": "Apache-2.0", + "_id": "my-local-b-off@0.0.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-b-off", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } + }, + "my-local-e": { + "version": "0.1.0", + "resolved": "file:../workspaces/my-local-e", + "overridden": false, + "name": "my-local-e", + "license": "Apache-2.0", + "_id": "my-local-e@0.1.0", + "extraneous": false, + "path": "D:\\a\\cyclonedx-node-npm\\cyclonedx-node-npm\\demo\\local-workspaces\\project\\node_modules\\my-local-e", + "_dependencies": {}, + "devDependencies": {}, + "peerDependencies": {} + } + } +} diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.json index e938f815a..72919e068 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.json @@ -144,9 +144,9 @@ }, { "type": "library", - "name": "my-local-b-off", + "name": "my-local-b", "version": "0.0.0", - "bom-ref": "my-local-b-off@0.0.0", + "bom-ref": "my-local-b@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -156,7 +156,7 @@ } } ], - "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "purl": "pkg:npm/my-local-b@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -240,11 +240,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b-off@0.0.0" + "my-local-b@0.0.0" ] }, { - "ref": "my-local-b-off@0.0.0" + "ref": "my-local-b@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.xml b/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.xml index d6a294021..1b89af221 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.xml +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_from-setup.snap.xml @@ -105,8 +105,8 @@ true - - my-local-b-off + + my-local-b 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -114,7 +114,7 @@ Apache-2.0 - pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b + pkg:npm/my-local-b@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -170,9 +170,9 @@ - + - + \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_macos-latest.snap.json index d48eb1d17..2b70b939a 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_macos-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -105,9 +122,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "licenses": [ { "license": { @@ -116,7 +133,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -157,11 +174,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_ubuntu-latest.snap.json index d48eb1d17..2b70b939a 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -105,9 +122,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "licenses": [ { "license": { @@ -116,7 +133,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -157,11 +174,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_windows-latest.snap.json index d48eb1d17..2b70b939a 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node18_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -105,9 +122,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "licenses": [ { "license": { @@ -116,7 +133,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -157,11 +174,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json new file mode 100644 index 000000000..2b70b939a --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_ubuntu-latest.snap.json index 1f522596a..d82e79d89 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -139,7 +156,24 @@ } } ], - "purl": "pkg:npm/my-local-b-off@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_windows-latest.snap.json index 1f522596a..d82e79d89 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node14_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -139,7 +156,24 @@ } } ], - "purl": "pkg:npm/my-local-b-off@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node16_macos-latest.snap.json new file mode 100644 index 000000000..d82e79d89 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node16_macos-latest.snap.json @@ -0,0 +1,216 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "description": "demo: my-local-a", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "DummyComponent.InterferedDependency.my-noname", + "bom-ref": "DummyComponent.InterferedDependency.my-noname", + "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "DummyComponent.InterferedDependency.my-noname", + "my-local-a@0.0.0" + ] + }, + { + "ref": "DummyComponent.InterferedDependency.my-noname" + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node22_windows-latest.snap.json new file mode 100644 index 000000000..d82e79d89 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm6_node22_windows-latest.snap.json @@ -0,0 +1,216 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "description": "demo: my-local-a", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "DummyComponent.InterferedDependency.my-noname", + "bom-ref": "DummyComponent.InterferedDependency.my-noname", + "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "DummyComponent.InterferedDependency.my-noname", + "my-local-a@0.0.0" + ] + }, + { + "ref": "DummyComponent.InterferedDependency.my-noname" + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_ubuntu-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_windows-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node14_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node16_macos-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node16_macos-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node22_windows-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm7_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_ubuntu-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_windows-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node14_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node16_macos-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node16_macos-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node22_windows-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm8_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_macos-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_macos-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_ubuntu-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_windows-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node16_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.json index d8fccdaf6..25ca1ae69 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.json @@ -187,6 +187,39 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -195,7 +228,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -213,6 +247,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.xml b/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.xml index 66d93361d..328cd4d94 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.xml +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_from-setup.snap.xml @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_macos-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_macos-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node18_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node14_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node16_macos-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node16_macos-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm7_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node14_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node16_macos-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node16_macos-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm8_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_macos-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_macos-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node16_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.json index e938f815a..72919e068 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.json @@ -144,9 +144,9 @@ }, { "type": "library", - "name": "my-local-b-off", + "name": "my-local-b", "version": "0.0.0", - "bom-ref": "my-local-b-off@0.0.0", + "bom-ref": "my-local-b@0.0.0", "description": "demo: my-local-b-off - a package with a different name than its dir", "licenses": [ { @@ -156,7 +156,7 @@ } } ], - "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "purl": "pkg:npm/my-local-b@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", "externalReferences": [ { "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", @@ -240,11 +240,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b-off@0.0.0" + "my-local-b@0.0.0" ] }, { - "ref": "my-local-b-off@0.0.0" + "ref": "my-local-b@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.xml b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.xml index d6a294021..1b89af221 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.xml +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_from-setup.snap.xml @@ -105,8 +105,8 @@ true - - my-local-b-off + + my-local-b 0.0.0 demo: my-local-b-off - a package with a different name than its dir @@ -114,7 +114,7 @@ Apache-2.0 - pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b + pkg:npm/my-local-b@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b https://github.com/CycloneDX/cyclonedx-node-npm/issues @@ -170,9 +170,9 @@ - + - + \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_macos-latest.snap.json index d48eb1d17..2b70b939a 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_macos-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -105,9 +122,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "licenses": [ { "license": { @@ -116,7 +133,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -157,11 +174,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_ubuntu-latest.snap.json index d48eb1d17..2b70b939a 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -105,9 +122,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "licenses": [ { "license": { @@ -116,7 +133,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -157,11 +174,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_windows-latest.snap.json index d48eb1d17..2b70b939a 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node18_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -105,9 +122,9 @@ }, { "type": "library", - "name": "my-local-b", + "name": "my-local-b-off", "version": "0.0.0", - "bom-ref": "my-local-b@0.0.0", + "bom-ref": "my-local-b-off@0.0.0", "licenses": [ { "license": { @@ -116,7 +133,7 @@ } } ], - "purl": "pkg:npm/my-local-b@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0", "properties": [ { "name": "cdx:npm:package:path", @@ -157,11 +174,11 @@ { "ref": "my-local-a@0.0.0", "dependsOn": [ - "my-local-b@0.0.0" + "my-local-b-off@0.0.0" ] }, { - "ref": "my-local-b@0.0.0" + "ref": "my-local-b-off@0.0.0" }, { "ref": "my-noname@0.0.0" diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node22_windows-latest.snap.json new file mode 100644 index 000000000..2b70b939a --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm10_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_ubuntu-latest.snap.json index 1f522596a..d82e79d89 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -139,7 +156,24 @@ } } ], - "purl": "pkg:npm/my-local-b-off@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_windows-latest.snap.json index 1f522596a..d82e79d89 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node14_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -139,7 +156,24 @@ } } ], - "purl": "pkg:npm/my-local-b-off@0.0.0", + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node16_macos-latest.snap.json new file mode 100644 index 000000000..d82e79d89 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node16_macos-latest.snap.json @@ -0,0 +1,216 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "description": "demo: my-local-a", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "DummyComponent.InterferedDependency.my-noname", + "bom-ref": "DummyComponent.InterferedDependency.my-noname", + "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "DummyComponent.InterferedDependency.my-noname", + "my-local-a@0.0.0" + ] + }, + { + "ref": "DummyComponent.InterferedDependency.my-noname" + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node22_windows-latest.snap.json new file mode 100644 index 000000000..d82e79d89 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm6_node22_windows-latest.snap.json @@ -0,0 +1,216 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "description": "demo: my-local-a", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-deps/project/packages/my-local-a", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "description": "demo: my-local-b-off - a package with a different name than its dir", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0?vcs_url=git%2Bssh%3A//git%40github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+ssh://git@github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project/packages/my-local-b", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + }, + { + "type": "library", + "name": "DummyComponent.InterferedDependency.my-noname", + "bom-ref": "DummyComponent.InterferedDependency.my-noname", + "description": "This is a dummy component \"InterferedDependency.my-noname\" that fills the gap where the actual built failed." + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "DummyComponent.InterferedDependency.my-noname", + "my-local-a@0.0.0" + ] + }, + { + "ref": "DummyComponent.InterferedDependency.my-noname" + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_ubuntu-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_windows-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node14_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node16_macos-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node16_macos-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node22_windows-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm7_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_ubuntu-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_windows-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node14_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node16_macos-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node16_macos-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node22_windows-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm8_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_macos-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_macos-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_ubuntu-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_ubuntu-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_windows-latest.snap.json index d48eb1d17..98ba30079 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node16_windows-latest.snap.json @@ -68,7 +68,24 @@ } } ], - "purl": "pkg:npm/demo-local-deps@0.0.0", + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", diff --git a/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node22_windows-latest.snap.json new file mode 100644 index 000000000..98ba30079 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-dependencies_npm9_node22_windows-latest.snap.json @@ -0,0 +1,187 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-local-deps", + "version": "0.0.0", + "bom-ref": "demo-local-deps@0.0.0", + "description": "demo: demo-local-deps -- showcase how local dependencies look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-local-deps@0.0.0?vcs_url=git%2Bhttps%3A//github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git#demo/local-dependencies/project", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.0.0", + "bom-ref": "my-local-a@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b", + "version": "0.0.0", + "bom-ref": "my-local-b@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-noname", + "version": "0.0.0", + "bom-ref": "my-noname@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-noname@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-noname" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-local-deps@0.0.0", + "dependsOn": [ + "my-local-a@0.0.0", + "my-noname@0.0.0" + ] + }, + { + "ref": "my-local-a@0.0.0", + "dependsOn": [ + "my-local-b@0.0.0" + ] + }, + { + "ref": "my-local-b@0.0.0" + }, + { + "ref": "my-noname@0.0.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.json index d8fccdaf6..25ca1ae69 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.json @@ -187,6 +187,39 @@ "value": "true" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "description": "demo: my-local-e - a standalone package that is not dependency of root nor any other workspace", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "externalReferences": [ + { + "url": "git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] } ], "dependencies": [ @@ -195,7 +228,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -213,6 +247,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.xml b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.xml index 66d93361d..328cd4d94 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.xml +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_from-setup.snap.xml @@ -131,12 +131,34 @@ true + + my-local-e + 0.1.0 + demo: my-local-e - a standalone package that is not dependency of root nor any other workspace + + + Apache-2.0 + + + pkg:npm/my-local-e@0.1.0?vcs_url=git%2Bhttps%3A//gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + + + git+https://gitlab.example.com/my-packages/demo-workspaces.git#workspaces/my-local-e + as detected from PackageJson property "repository.url" and "repository.directory" + + + + node_modules/my-local-e + true + + + @@ -146,5 +168,6 @@ + \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_macos-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_macos-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node18_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm10_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node14_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node16_macos-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node16_macos-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm7_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node14_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node16_macos-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node16_macos-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm8_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_macos-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_macos-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_ubuntu-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_ubuntu-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_windows-latest.snap.json index ba6ae4823..584ae3395 100644 --- a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node16_windows-latest.snap.json @@ -68,7 +68,14 @@ } } ], - "purl": "pkg:npm/demo-workspaces@0.0.0", + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], "properties": [ { "name": "cdx:npm:package:path", @@ -144,6 +151,27 @@ "value": "node_modules/my-local-c" } ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] } ], "dependencies": [ @@ -152,7 +180,8 @@ "dependsOn": [ "my-local-a@0.1.0", "my-local-b-off@0.0.0", - "my-local-c@0.23.42" + "my-local-c@0.23.42", + "my-local-e@0.1.0" ] }, { @@ -170,6 +199,9 @@ "my-local-a@0.1.0", "my-local-b-off@0.0.0" ] + }, + { + "ref": "my-local-e@0.1.0" } ] } \ No newline at end of file diff --git a/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node22_windows-latest.snap.json new file mode 100644 index 000000000..584ae3395 --- /dev/null +++ b/tests/_data/sbom_demo-results/flatten-components/local-workspaces_npm9_node22_windows-latest.snap.json @@ -0,0 +1,207 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "tools": [ + { + "name": "npm", + "version": "npmVersion-testing" + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-library", + "version": "libVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + }, + { + "vendor": "@cyclonedx", + "name": "cyclonedx-npm", + "version": "thisVersion-testing", + "externalReferences": [ + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues", + "type": "issue-tracker", + "comment": "as detected from PackageJson property \"bugs.url\"" + }, + { + "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme", + "type": "website", + "comment": "as detected from PackageJson property \"homepage\"" + } + ] + } + ], + "component": { + "type": "application", + "name": "demo-workspaces", + "version": "0.0.0", + "bom-ref": "demo-workspaces@0.0.0", + "description": "demo: demo-workspaces -- showcase how workspaces look like", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/demo-workspaces@0.0.0?vcs_url=git%2Bssh%3A//git%40gitlab.example.com/my-packages/demo-workspaces.git", + "externalReferences": [ + { + "url": "git+ssh://git@gitlab.example.com/my-packages/demo-workspaces.git", + "type": "vcs", + "comment": "as detected from PackageJson property \"repository.url\"" + } + ], + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "" + }, + { + "name": "cdx:npm:package:private", + "value": "true" + } + ] + } + }, + "components": [ + { + "type": "library", + "name": "my-local-a", + "version": "0.1.0", + "bom-ref": "my-local-a@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-a@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-a" + } + ] + }, + { + "type": "library", + "name": "my-local-b-off", + "version": "0.0.0", + "bom-ref": "my-local-b-off@0.0.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-b-off@0.0.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-b-off" + } + ] + }, + { + "type": "library", + "name": "my-local-c", + "version": "0.23.42", + "bom-ref": "my-local-c@0.23.42", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-c@0.23.42", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-c" + } + ] + }, + { + "type": "library", + "name": "my-local-e", + "version": "0.1.0", + "bom-ref": "my-local-e@0.1.0", + "licenses": [ + { + "license": { + "id": "Apache-2.0", + "acknowledgement": "declared" + } + } + ], + "purl": "pkg:npm/my-local-e@0.1.0", + "properties": [ + { + "name": "cdx:npm:package:path", + "value": "node_modules/my-local-e" + } + ] + } + ], + "dependencies": [ + { + "ref": "demo-workspaces@0.0.0", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0", + "my-local-c@0.23.42", + "my-local-e@0.1.0" + ] + }, + { + "ref": "my-local-a@0.1.0", + "dependsOn": [ + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-b-off@0.0.0" + }, + { + "ref": "my-local-c@0.23.42", + "dependsOn": [ + "my-local-a@0.1.0", + "my-local-b-off@0.0.0" + ] + }, + { + "ref": "my-local-e@0.1.0" + } + ] +} \ No newline at end of file