{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:abdeda75-54f9-41c6-a884-d503cba0721c", "version": 1, "metadata": { "timestamp": "2026-10-13T18:42:43Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "send", "group": "", "version": "0.1.0-tuxcare.2", "description": "Better streaming static file server with Range and conditional-GET support", "purl": "pkg:npm/send@0.1.0-tuxcare.2", "bom-ref": "pkg:npm/send@0.1.0-tuxcare.2", "author": "TJ Holowaychuk ", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/send.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "debug", "version": "0.7.4", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "1288406f7f83487486c7c71aace48a25ef06d1ac95e7f8bad3d383d09da8ac292ec9a7bb4b2652cf66a82e6405dacd0f8f98084c379bc0f1fb185065a8e510d5" } ], "purl": "pkg:npm/debug@0.7.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@0.7.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz" }, { "name": "cdx:npm:versionMismatchError", "value": "0.7.4-tuxcare.1 used instead of 0.7.4" }, { "name": "ImportedModules", "value": "debug" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/send.js", "line": 6 } ] } }, { "group": "", "name": "fresh", "version": "0.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "44e1bd33cb629183ae389b2f441820875d16890fc979b9e5740c2e09a43216888050813d5eb6159e9ce72233901997c2333c7310160742bfcb1c9a77b5c9ddcd" } ], "purl": "pkg:npm/fresh@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fresh/-/fresh-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fresh@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fresh/-/fresh-0.1.0.tgz" }, { "name": "cdx:npm:versionMismatchError", "value": "0.1.0-tuxcare.1 used instead of 0.1.0" }, { "name": "ImportedModules", "value": "fresh" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/send.js", "line": 10 } ] } }, { "group": "", "name": "mime", "version": "1.2.11", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "62c6b617f9ea4cd1878619bd315f2eadee3e1dcf98f005a2a94747c6c3bbc6ef3373dd8d0fd7f792900b1e368fd36e85b75ed47f1accb7de5ce743cb51eca707" } ], "purl": "pkg:npm/mime@1.2.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz" }, { "name": "cdx:npm:versionMismatchError", "value": "1.2.11-tuxcare.2 used instead of 1.2.11" }, { "name": "ImportedModules", "value": "mime" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/send.js", "line": 9 } ] } }, { "group": "", "name": "range-parser", "version": "0.0.4", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a2425512af436d9ca0fb9943f29afaa28426780d2ebbc0d8232014ed52b559450aee172d235cb0d991e12a22a307a457683ad84664d1e12b081e4ca242968b30" } ], "purl": "pkg:npm/range-parser@0.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/range-parser/-/range-parser-0.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/range-parser@0.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/range-parser/-/range-parser-0.0.4.tgz" }, { "name": "ImportedModules", "value": "range-parser" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/send.js", "line": 7 } ] }, "tags": [ "parse" ] }, { "group": "", "name": "connect", "version": "2.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "26a5c19f5639ccefb5bc423fc063c5a0b8e5aaefba5dd452ccf5002d8b216daa23bd2c3e3802a40a1c13e7469d09d404790c1a9128a6bb89a10c18eea69d1136" } ], "purl": "pkg:npm/connect@2.11.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/connect/-/connect-2.11.0.tgz" } ], "type": "framework", "bom-ref": "pkg:npm/connect@2.11.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/connect/-/connect-2.11.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "connect 2.x series is deprecated" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "buffer-crc32", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bcc7c1211a7fc23969b9e4b3ed26f43a63bb0b9487e7c49299bb13f06e03e3c61f3bf6606ebdbdc4d5cca595520b5e2e8d525fad9647d4197e91761140fbaf7d" } ], "purl": "pkg:npm/buffer-crc32@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/buffer-crc32@0.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "bytes", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a1d6e4f3fc066b33ae0b5bfcbf8a61a15dbce7fcb1f1437991f42186ec5a55c71e8a0e0e522099401b5a12d980d50efc4124cdf625ce43b5f61158b26eb12fb5" } ], "purl": "pkg:npm/bytes@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/bytes/-/bytes-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bytes@0.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/bytes/-/bytes-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cookie", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "61234e057d3ce7f9f31efad32c41d81e835d92fa4b53530f8d4debd4819ac2e7592637eeaa744d205adc38927b6dfc02f8759b1cbd58e323240b43be1d68d5ef" } ], "purl": "pkg:npm/cookie@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cookie/-/cookie-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cookie@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cookie/-/cookie-0.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cookie-signature", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14c1b9ce20735d9e5de23e686db58e1f55fb02d229b14f5c7bd990fa51e8fc8d7efa4cf3fe2b0d6ab3a3e93d6504f46ca4fde6669b88bad73b3950d571a3752a" } ], "purl": "pkg:npm/cookie-signature@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cookie-signature@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fresh", "version": "0.2.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "72419d02e491af5c019a7abb0ac5bb794dfb0c1c10c47c77bd6f1fa09508ac5e7aae43b2f0eb26e857bc292c1e9b0c8a7a38af2a48bb8d5060a41a4125ec66af" } ], "purl": "pkg:npm/fresh@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fresh/-/fresh-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fresh@0.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fresh/-/fresh-0.2.0.tgz" }, { "name": "ImportedModules", "value": "fresh" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/send.js", "line": 10 } ] } }, { "group": "", "name": "methods", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a41f2815f722ff171f52033a0d3c5cee56d32a27cf3e0b3799950eb0481a1fed534d6a66726bf7b0797ee6c507223d97d96f1a3d86b6fa725e6a54472be2e8e8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/methods@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/methods/-/methods-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/methods@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/methods/-/methods-0.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "multiparty", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7e214c238b52cded53b2b58564d001470cbb905fd5c9c116cf8b745051123a83f921d261dbd0141666e2ad65effc887facdc3ad8e3b661a4294048b0d41150a5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/multiparty@2.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/multiparty/-/multiparty-2.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/multiparty@2.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/multiparty/-/multiparty-2.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.1.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5f3ed6f9c935bd09d36ae539528db360afc07bc3aee66449aca906143657f9517ddb51f0b232fa973de06bebd3f2341ae874ffd196da98a7df87d384ef1278bd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.9.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d12b6bda89cd1c63d606438db8a34bb47e796b2e8336451eef0e81888bf76e8a9b59293daef6bbbb323a475dc1708e0b2828b2daf5a3b7b0331a9d67c3b6a5cb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debuglog", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "47a065e89c73595aeab97a217681e4c8632068bf1eb145e14b307a5947d25f537ed5d160df4628f60b214eeec4c55ea7b4a378568245c3ccd574fb155581a62a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debuglog@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debuglog/-/debuglog-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debuglog@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debuglog/-/debuglog-0.0.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "stream-counter", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1a3036cca73689751429170ec57426844c7412fdd71c9e9cf32586aa14235b0846aea3704acbeaf589512e0a06b59e4ac762e7f7821e75aa89e46506e9a05bc4" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-counter@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stream-counter@0.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "negotiator", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "abdc05eb8b81df5043650e380d67fef2013bcbcc52a41751100b097e704ed965fd79cb2eb5f50ee92f6e584762c650cb3a559aaa79671575f06715149b22df82" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/negotiator@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "pause", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "286f14122115911df01846f89b9c999150b38a0003f9c54425c9360b36193b7ed91897dcb6f569b553b5f76330aed3e1cce367ea0a3cca59ce74c84aaa2e277e" } ], "purl": "pkg:npm/pause@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/pause/-/pause-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/pause@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/pause/-/pause-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "qs", "version": "0.6.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9fbc00fdfdf43b74ac3b0d815641940f38d6330ee45ef40958ab437607eae4726f0e869df896dcea8b0dd4043421a8a7e69968f5eec2b397c4fb147e0d590f4f" } ], "purl": "pkg:npm/qs@0.6.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/qs/-/qs-0.6.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/qs@0.6.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/qs/-/qs-0.6.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "raw-body", "version": "0.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5a31995a76550d5af8557dbb4c0697ef04e71e1b7896acf69d7d31463405515c68a316173d8d85ec357a6ef95527e1d29e7f41021939aad78a2fc63f5e758aab" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/raw-body@0.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/raw-body/-/raw-body-0.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/raw-body@0.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/raw-body/-/raw-body-0.0.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "No longer maintained. Please upgrade to a stable version." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "send", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3499c8681dbdfc470daa4367794026d7aa04567cccd8b78d05cfe19a02ae131bf693da42650130f121c9782763a9eb07253c9602bef1e478de3a64454b806817" } ], "purl": "pkg:npm/send@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/send/-/send-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/send@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/send/-/send-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uid2", "version": "0.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e6048fd658afd741a3a7c70c12715deac87390bfc3e96d6e857485342c430be608f3e2fcc2409809b27b9fbec4cdbe3013fc7332881e704f83b5a9847bd3d98e" } ], "purl": "pkg:npm/uid2@0.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uid2/-/uid2-0.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uid2@0.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uid2/-/uid2-0.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "1.14.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "700713a3a415911601aa93684c69f09ab9cb8f9be5c843f13544e34d78b40d3daeecf746434aa8dd542b82def14689814e525bbe7db19b14b5f4643234a4f272" } ], "purl": "pkg:npm/mocha@1.14.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-1.14.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@1.14.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-1.14.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha" }, { "name": "cdx:npm:bin", "value": "_mocha, mocha" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Mocha v1.x is no longer supported." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "commander", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a9e6e3a7279a03f9c9e30dc43b6715dbefbfcc491c70f9e35a8833036adf7fe2e4f082c8ef9bd42de4e6c9de303f159d2b0b4fdc9f86dfd21755969d874507cb" } ], "purl": "pkg:npm/commander@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d1b4cbcf2af54b9f5c3ec8000ff951fa2bef1d36e03dbfa4fe6511e961aa99ad49e900d4fa451e808f2e405b87fdc31434aec918ddd393563925fd8c3bce56ac" } ], "purl": "pkg:npm/diff@1.0.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-1.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.0.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-1.0.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-3.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-3.2.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0989f1153cdf8c39ed2410704417979a955c81eb6c3a893c0220da6463bbc0d65984cc3beae948a8b71bf05ad91eedf3ebcf9c8ce72e2b3f074b72581b0e138" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f275aada72d3030774da34ea244c54605483fdf2aae951fd63fa06d9a71c73f91d23457df016a0f1de5ae208b75c7cfbdeb0d66b63ef4edbdc598aae2aa48434" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.2.12", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8de55d7ca9a5a262deadff1e71eb52afa80b4b43979cb465ba19eff517f6ca3ef436c0fcb951aaae9c13a8918aa4817c553451f5f40097ad8267578d204324dc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.2.12", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.12.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.2.12", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.12.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "123b66b57154bbec179ba3d6dd3e914f57a4414c686c2ec1e530c2534092d36d76c33a702a25eceaf2ee9fe248f8ea169a696259d62a9eba63ae52bb5b710b75" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.3.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5edaf127805fe670e749c076d94d1fb744e90932d216990f02ea27df6dd7f66170628c335aeb016ee9f13ac8b690ee856f6f6b7876713cd1e038bfdf30da8ca1" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "556bfbb35108e35006d8b882afbb80bb15a290b0cdd5240eb8451cdfb77f3f7e0d008218824bd662780dc3477d77d882ac314bd1260213d510a718488e3b6e2e" } ], "purl": "pkg:npm/growl@1.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.7.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jade", "version": "0.26.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a4937bf3507163cca8e90977aef888d77990fe40e4e351476e6e0987b474c3c2f00ed994e43134d5adaa6db39096cf726f26bca1ff82966698de66b09ea59dc" } ], "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/jade" }, { "name": "cdx:npm:bin", "value": "jade" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d1f2f272997550c4c65f6e7b851b2efdaacbfdc51b72f40ce3330ac2f2efcd7b5f75ecc8578ca8b4f4b6758b649c5f8d9847d64a808417afa18fd5cb9bfea113" } ], "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "387b1d51c54043aa4eb60e49616a42068f56fc6c9256ec2f3fd86e791316ed4aac842d2d6dfccbbfcc23c924cf9b7b5f519ff6d4213d135a496a0380f753f17b" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f0e0aad037bf87d671b1eab3087f0ac3f16295fe6917fbcc23af811fb2eed235f3da9a980a34c0411a254b14488be031fa80828e5c6824c3f4610e1796b40d1e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.5.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "should", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "597c581b0bd2d12f834c7ce6a811da10749024e07d2046739a65bd9adc5f57ea5d0c83929b3fbde95d6db3f22adda97d8e59b612174b5c2a19a85e742030f958" } ], "purl": "pkg:npm/should@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/should/-/should-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/should@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/should/-/should-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supertest", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "63f41948046d610aab6c6c84a623fc38639003687b82a24c0f6a94f7bcbb2240e53593e84c2d1258e5b121f2e6ae6c674a32b3f8522030f4819ad65e29f2466a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supertest@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supertest/-/supertest-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supertest@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supertest/-/supertest-0.0.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please upgrade to supertest v7.1.3+, see release notes at https://github.com/forwardemail/supertest/releases/tag/v7.1.3 - maintenance is supported by Forward Email @ https://forwardemail.net" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "superagent", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e97361a8117c754185617e3d58dcc769ed24d161596bdffa4f51ce958fcf860489bca5b208fb66340d1c782cba57c9d95e2bd2a32c88e0f0c02c91db161b60d9" } ], "purl": "pkg:npm/superagent@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/superagent/-/superagent-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/superagent@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/superagent/-/superagent-0.5.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please upgrade to superagent v10.2.2+, see release notes at https://github.com/forwardemail/superagent/releases/tag/v10.2.2 - maintenance is supported by Forward Email @ https://forwardemail.net" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "emitter-component", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3b5ce837144b69491c613940b7a4a8d175b2ab8717ab60a2939198b9f12364b76a38dc233d31c81eba5c6e5967d00ab0378a0aa47b6f6aa0590685fd34921968" } ], "purl": "pkg:npm/emitter-component@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/emitter-component/-/emitter-component-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/emitter-component@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/emitter-component/-/emitter-component-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "formidable", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b43705c309df2a1788c6c31c2b3623133e23adc0df1d67f2560e58f40c4f1bf61f9a419d39d70708c0d6360d6220e692377561543d240a4c1aca21bdfc3ae0e1" } ], "purl": "pkg:npm/formidable@1.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/formidable/-/formidable-1.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/formidable@1.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/formidable/-/formidable-1.0.9.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mime", "version": "1.2.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "41fc13380fb34474995f197d63bb9ee627ca0e1535a6b9e1d1d3baed581c97b2dcc74fbbf6f2fd035967d2ab55babf02152758ab96619f0f430d9420c0387c36" } ], "purl": "pkg:npm/mime@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime/-/mime-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.2.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime/-/mime-1.2.5.tgz" }, { "name": "ImportedModules", "value": "mime" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/send.js", "line": 9 } ] } }, { "group": "", "name": "qs", "version": "0.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "540b5f59e52d9413a71a2585a24daf388326c2e9a22e6a6a5c371741c00421098b6200db8eb907adc1417ed87e6150de46ccfb8d7e3876126bec8049474b7f15" } ], "purl": "pkg:npm/qs@0.4.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/qs/-/qs-0.4.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/qs@0.4.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/qs/-/qs-0.4.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/debug@0.7.4", "dependsOn": [] }, { "ref": "pkg:npm/fresh@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/mime@1.2.11", "dependsOn": [] }, { "ref": "pkg:npm/range-parser@0.0.4", "dependsOn": [] }, { "ref": "pkg:npm/buffer-crc32@0.2.1", "dependsOn": [] }, { "ref": "pkg:npm/bytes@0.2.1", "dependsOn": [] }, { "ref": "pkg:npm/cookie@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/cookie-signature@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/fresh@0.2.0", "dependsOn": [] }, { "ref": "pkg:npm/methods@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debuglog@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.1.9", "dependsOn": [ "pkg:npm/core-util-is@1.0.0", "pkg:npm/debuglog@0.0.2" ] }, { "ref": "pkg:npm/stream-counter@0.2.0", "dependsOn": [ "pkg:npm/readable-stream@1.1.9" ] }, { "ref": "pkg:npm/multiparty@2.2.0", "dependsOn": [ "pkg:npm/readable-stream@1.1.9", "pkg:npm/stream-counter@0.2.0" ] }, { "ref": "pkg:npm/negotiator@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/pause@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/qs@0.6.5", "dependsOn": [] }, { "ref": "pkg:npm/raw-body@0.0.3", "dependsOn": [] }, { "ref": "pkg:npm/send@0.1.4", "dependsOn": [ "pkg:npm/debug@0.7.4", "pkg:npm/fresh@0.2.0", "pkg:npm/mime@1.2.11", "pkg:npm/range-parser@0.0.4" ] }, { "ref": "pkg:npm/uid2@0.0.3", "dependsOn": [] }, { "ref": "pkg:npm/connect@2.11.0", "dependsOn": [ "pkg:npm/buffer-crc32@0.2.1", "pkg:npm/bytes@0.2.1", "pkg:npm/cookie-signature@1.0.1", "pkg:npm/cookie@0.1.0", "pkg:npm/debug@0.7.4", "pkg:npm/fresh@0.2.0", "pkg:npm/methods@0.0.1", "pkg:npm/multiparty@2.2.0", "pkg:npm/negotiator@0.3.0", "pkg:npm/pause@0.0.1", "pkg:npm/qs@0.6.5", "pkg:npm/raw-body@0.0.3", "pkg:npm/send@0.1.4", "pkg:npm/uid2@0.0.3" ] }, { "ref": "pkg:npm/commander@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/diff@1.0.7", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.3.1", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.2.12", "dependsOn": [ "pkg:npm/lru-cache@2.3.1", "pkg:npm/sigmund@1.0.0" ] }, { "ref": "pkg:npm/glob@3.2.3", "dependsOn": [ "pkg:npm/graceful-fs@2.0.1", "pkg:npm/inherits@2.0.1", "pkg:npm/minimatch@0.2.12" ] }, { "ref": "pkg:npm/growl@1.7.0", "dependsOn": [] }, { "ref": "pkg:npm/commander@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/jade@0.26.3", "dependsOn": [ "pkg:npm/commander@0.6.1", "pkg:npm/mkdirp@0.3.0" ] }, { "ref": "pkg:npm/mkdirp@0.3.5", "dependsOn": [] }, { "ref": "pkg:npm/mocha@1.14.0", "dependsOn": [ "pkg:npm/commander@2.0.0", "pkg:npm/debug@0.7.4", "pkg:npm/diff@1.0.7", "pkg:npm/glob@3.2.3", "pkg:npm/growl@1.7.0", "pkg:npm/jade@0.26.3", "pkg:npm/mkdirp@0.3.5" ] }, { "ref": "pkg:npm/should@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/emitter-component@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/formidable@1.0.9", "dependsOn": [] }, { "ref": "pkg:npm/mime@1.2.5", "dependsOn": [] }, { "ref": "pkg:npm/qs@0.4.2", "dependsOn": [] }, { "ref": "pkg:npm/superagent@0.5.0", "dependsOn": [ "pkg:npm/emitter-component@0.0.1", "pkg:npm/formidable@1.0.9", "pkg:npm/mime@1.2.5", "pkg:npm/qs@0.4.2" ] }, { "ref": "pkg:npm/supertest@0.0.1", "dependsOn": [ "pkg:npm/methods@0.0.1", "pkg:npm/superagent@0.5.0" ] }, { "ref": "pkg:npm/send@0.1.0-tuxcare.2", "dependsOn": [ "pkg:npm/connect@2.11.0", "pkg:npm/debug@0.7.4", "pkg:npm/fresh@0.1.0", "pkg:npm/mime@1.2.11", "pkg:npm/mocha@1.14.0", "pkg:npm/range-parser@0.0.4", "pkg:npm/should@2.1.0", "pkg:npm/supertest@0.0.1" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/send@0.1.0-tuxcare.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.5", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-13T18:42:43Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, October 13, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'send' with version '0.1.0-tuxcare.2'." } ] }