{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:c46c1a87-cb08-432d-856f-ff49c62f3d9f", "version": 1, "metadata": { "timestamp": "2026-10-24T23:03:28Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "cdk", "group": "@medplum", "version": "3.3.1-tuxcare.3", "description": "Medplum CDK Infra as Code", "purl": "pkg:npm/%40medplum/cdk@3.3.1-tuxcare.3", "bom-ref": "pkg:npm/@medplum/cdk@3.3.1-tuxcare.3", "author": "Medplum ", "properties": [ { "name": "cdx:npm:scripts", "value": "build, cdk, clean, lint, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://www.medplum.com/" }, { "type": "vcs", "url": "git+https://github.com/medplum/medplum.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@aws-cdk\\n@aws-sdk\\n@balena\\n@medplum\\n@smithy\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@aws-sdk", "name": "types", "version": "3.734.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a35d6d48f4d3ef49c09065757cdf709bf8402222cfc965fa4ae19ffbd2724e9ed2feb0b67055a1476e8cbc0ebd9e995c8cd6975730747fe405acb5d78cea82ae" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-sdk/types@3.734.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@aws-sdk/types/-/types-3.734.0.tgz" } ], "type": "framework", "bom-ref": "pkg:npm/@aws-sdk/types@3.734.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@aws-sdk/types/-/types-3.734.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "framework" ] }, { "group": "@smithy", "name": "types", "version": "4.19.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "afb8e1e3d549c467ab7c0713400ea05dc29cfbdf333a9feda91c3362380e13e89242c3fa70453586ad90cdbba2a663faf10b58758f70284862090648cc7819e1" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40smithy/types@4.19.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@smithy/types/-/types-4.19.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@smithy/types@4.19.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@smithy/types/-/types-4.19.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tslib", "version": "2.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0916ef781d06fe29576e49440bef09e99aa9df98bb0e03f9c087a6fa107d30084a0ad3f98f79753a737c0a0d5f373243ae1cf447b525ca294f7d2016b34bfdb" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@2.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@medplum", "name": "core", "version": "3.3.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3f25e96d4f6a4e2473ca71bb42e126905c10a055c6d5b6e8f9019f084651291bf5d383974e7063e576d4ca8774f13b39a6fedbb037e1c71f1b9b6ba5bdfee21b" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40medplum/core@3.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@medplum/core/-/core-3.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@medplum/core@3.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@medplum/core/-/core-3.3.1.tgz" }, { "name": "ImportedModules", "value": "@medplum/core,MedplumInfraConfig,@medplum/core/MedplumInfraConfig,MedplumSourceInfraConfig,@medplum/core/MedplumSourceInfraConfig" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/backend.ts", "line": 1 }, { "location": "src/cloudtrail.ts", "line": 1 }, { "location": "src/frontend.ts", "line": 1 }, { "location": "src/index.ts", "line": 1 }, { "location": "src/stack.ts", "line": 1 }, { "location": "src/storage.ts", "line": 1 } ] } }, { "group": "", "name": "aws-cdk-lib", "version": "2.178.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "4a5ebfa68b0896f7e80f720b1e5001682570d82f388db86543e980f09dc31056cdd91beb3e41b8773e0741f0b92225d026282edfd9268fbdc93d00a748a97688" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-cdk-lib@2.178.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.178.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws-cdk-lib@2.178.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.178.1.tgz" }, { "name": "ImportedModules", "value": "aws-cdk-lib,aws-cdk-lib/aws-ecr,aws-cdk-lib/aws-rds,aws-cdk-lib/App,Stack,aws-cdk-lib/Stack,Tags,aws-cdk-lib/Tags,Duration,aws-cdk-lib/Duration,RemovalPolicy,aws-cdk-lib/RemovalPolicy,aws_ec2,aws-cdk-lib/aws_ec2,aws_ecs,aws-cdk-lib/aws_ecs,aws_elasticache,aws-cdk-lib/aws_elasticache,aws_elasticloadbalancingv2,aws-cdk-lib/aws_elasticloadbalancingv2,aws_iam,aws-cdk-lib/aws_iam,aws_logs,aws-cdk-lib/aws_logs,aws_rds,aws-cdk-lib/aws_rds,aws_route53,aws-cdk-lib/aws_route53,aws_s3,aws-cdk-lib/aws_s3,aws_secretsmanager,aws-cdk-lib/aws_secretsmanager,aws_ssm,aws-cdk-lib/aws_ssm,aws_route53_targets,aws-cdk-lib/aws_route53_targets,aws_wafv2,aws-cdk-lib/aws_wafv2,Repository,aws-cdk-lib/aws-ecr/Repository,ClusterInstance,aws-cdk-lib/aws-rds/ClusterInstance,ParameterGroup,aws-cdk-lib/aws-rds/ParameterGroup,aws_cloudtrail,aws-cdk-lib/aws_cloudtrail,aws_cloudwatch,aws-cdk-lib/aws_cloudwatch,aws_cloudwatch_actions,aws-cdk-lib/aws_cloudwatch_actions,aws_sns,aws-cdk-lib/aws_sns,aws_certificatemanager,aws-cdk-lib/aws_certificatemanager,aws_cloudfront,aws-cdk-lib/aws_cloudfront,aws_cloudfront_origins,aws-cdk-lib/aws_cloudfront_origins" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/cjs/index.cjs", "line": 1 }, { "location": "dist/esm/index.mjs", "line": 1 }, { "location": "src/backend.ts", "line": 18 }, { "location": "src/backend.ts", "line": 19 }, { "location": "src/backend.ts", "line": 20 }, { "location": "src/backend.ts", "line": 196 }, { "location": "src/backend.ts", "line": 495 }, { "location": "src/backend.ts", "line": 506 }, { "location": "src/backend.ts", "line": 507 }, { "location": "src/backend.ts", "line": 527 }, { "location": "src/backend.ts", "line": 528 }, { "location": "src/cloudtrail.ts", "line": 8 }, { "location": "src/frontend.ts", "line": 13 }, { "location": "src/frontend.ts", "line": 100 }, { "location": "src/index.ts", "line": 2 }, { "location": "src/oai.ts", "line": 1 }, { "location": "src/stack.ts", "line": 2 }, { "location": "src/stack.ts", "line": 38 }, { "location": "src/stack.ts", "line": 59 }, { "location": "src/storage.ts", "line": 12 }, { "location": "src/storage.ts", "line": 96 }, { "location": "src/storage.ts", "line": 115 }, { "location": "src/waf.ts", "line": 3 }, { "location": "src/backend.ts", "line": 672 }, { "location": "src/backend.ts", "line": 181 }, { "location": "src/backend.ts", "line": 207 } ] }, "tags": [ "cloud" ] }, { "group": "", "name": "constructs", "version": "10.4.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "c2c371065028b6ddaa83c66ff3bab779865882179bf65721b417e31f3ccb1ed5dbb6dc12ac73ecd4d3506c1ae66dbd5866f620dbe561d03a2befac38985c4990" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/constructs@10.4.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/constructs/-/constructs-10.4.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/constructs@10.4.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/constructs/-/constructs-10.4.2.tgz" }, { "name": "ImportedModules", "value": "constructs,Construct,constructs/Construct" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/cjs/index.cjs", "line": 1 }, { "location": "dist/esm/index.mjs", "line": 1 }, { "location": "src/backend.ts", "line": 21 }, { "location": "src/cloudtrail.ts", "line": 9 }, { "location": "src/frontend.ts", "line": 14 }, { "location": "src/storage.ts", "line": 14 } ] } }, { "group": "@aws-cdk", "name": "asset-awscli-v1", "version": "2.2.295", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "95cd3b7c08be20a8f83ed327980ba22df17a39b0d5017ad97b138142cb152bc399eee8f08c60bb08ef63de9c4b7300ebaf12c2b38cffa82735f693c7fb99e23e" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-cdk/asset-awscli-v1@2.2.295", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@aws-cdk/asset-awscli-v1/-/asset-awscli-v1-2.2.295.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@aws-cdk/asset-awscli-v1@2.2.295", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@aws-cdk/asset-awscli-v1/-/asset-awscli-v1-2.2.295.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@aws-cdk", "name": "asset-kubectl-v20", "version": "2.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3ecd8c9268d880cc9f95a82a4387604c495ced5c29aa3f2ca70f1d41516249e69a30fb2e0d236c3dac77fc78ee0eec2ab262dd68265ceae9a5c582e92f49180c" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-cdk/asset-kubectl-v20@2.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@aws-cdk/asset-kubectl-v20/-/asset-kubectl-v20-2.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@aws-cdk/asset-kubectl-v20@2.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@aws-cdk/asset-kubectl-v20/-/asset-kubectl-v20-2.1.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@aws-cdk", "name": "asset-node-proxy-agent-v6", "version": "2.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f7c59ed5059f8a7f6fb6eb90b4d16120800459bf02adec984c03f4567f07a9206836214933d9d98227c97906b04fd5aad0d5f51c23459710b24dc708acad4f48" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-cdk/asset-node-proxy-agent-v6@2.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@aws-cdk/asset-node-proxy-agent-v6@2.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.1.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@aws-cdk", "name": "cloud-assembly-schema", "version": "39.2.20", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "448ed2f23a61180f266a4d79e0496710940f3534d5e0f66603b8e0aa70411d01b238f2485f1b400ae6cd4399b86208e990add4247b164fefdc3807ccfc0bbf5a" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-cdk/cloud-assembly-schema@39.2.20", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@aws-cdk/cloud-assembly-schema/-/cloud-assembly-schema-39.2.20.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@aws-cdk/cloud-assembly-schema@39.2.20", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@aws-cdk/cloud-assembly-schema/-/cloud-assembly-schema-39.2.20.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "cloud" ] }, { "group": "", "name": "jsonschema", "version": "1.4.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonschema@1.4.1", "type": "library", "bom-ref": "pkg:npm/jsonschema@1.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "semver", "version": "7.7.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.7.1", "type": "library", "bom-ref": "pkg:npm/semver@7.7.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/cdk/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/.bin/semver" }, { "name": "cdx:npm:bin", "value": "semver" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "cloud" ] }, { "group": "@balena", "name": "dockerignore", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40balena/dockerignore@1.0.2", "type": "library", "bom-ref": "pkg:npm/@balena/dockerignore@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "case", "version": "1.6.3", "scope": "optional", "licenses": [ { "expression": "MIT OR GPL-3.0-or-later" } ], "purl": "pkg:npm/case@1.6.3", "type": "library", "bom-ref": "pkg:npm/case@1.6.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs-extra", "version": "11.3.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@11.3.0", "type": "library", "bom-ref": "pkg:npm/fs-extra@11.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jsonfile", "version": "6.1.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonfile@6.1.0", "type": "library", "bom-ref": "pkg:npm/jsonfile@6.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "universalify", "version": "2.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/universalify@2.0.1", "type": "library", "bom-ref": "pkg:npm/universalify@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ignore", "version": "5.3.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@5.3.2", "type": "library", "bom-ref": "pkg:npm/ignore@5.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jsonschema", "version": "1.5.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonschema@1.5.0", "type": "library", "bom-ref": "pkg:npm/jsonschema@1.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.1.2", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.2", "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "punycode", "version": "2.3.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.3.1", "type": "library", "bom-ref": "pkg:npm/punycode@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "semver", "version": "7.6.3", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.6.3", "type": "library", "bom-ref": "pkg:npm/semver@7.6.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/cdk/node_modules/aws-cdk-lib/node_modules/.bin/semver" }, { "name": "cdx:npm:bin", "value": "semver" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "table", "version": "6.9.0", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/table@6.9.0", "type": "library", "bom-ref": "pkg:npm/table@6.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ajv", "version": "8.17.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@8.17.1", "type": "library", "bom-ref": "pkg:npm/ajv@8.17.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-deep-equal", "version": "3.1.3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-deep-equal@3.1.3", "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@3.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-uri", "version": "3.0.6", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-uri@3.0.6", "type": "library", "bom-ref": "pkg:npm/fast-uri@3.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json-schema-traverse", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@1.0.0", "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "require-from-string", "version": "2.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-from-string@2.0.2", "type": "library", "bom-ref": "pkg:npm/require-from-string@2.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.truncate", "version": "4.4.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.truncate@4.4.2", "type": "library", "bom-ref": "pkg:npm/lodash.truncate@4.4.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "slice-ansi", "version": "4.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slice-ansi@4.0.0", "type": "library", "bom-ref": "pkg:npm/slice-ansi@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-styles", "version": "4.3.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-convert", "version": "2.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-name", "version": "1.1.4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "astral-regex", "version": "2.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/astral-regex@2.0.0", "type": "library", "bom-ref": "pkg:npm/astral-regex@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string-width", "version": "4.2.3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "emoji-regex", "version": "8.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-ansi", "version": "6.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-regex", "version": "5.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yaml", "version": "1.10.2", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@1.10.2", "type": "library", "bom-ref": "pkg:npm/yaml@1.10.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cdk", "version": "2.178.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f5e571887c138f43f503fa3492b1e42d97553bbfe5d2effc9616b7c70cd10f44e897082ab127987ef4e52f8f3cc40b88dff840abfb09c8737db5fa7a925c3682" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cdk@2.178.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cdk/-/cdk-2.178.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cdk@2.178.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cdk/-/cdk-2.178.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/cdk/node_modules/.bin/cdk" }, { "name": "cdx:npm:bin", "value": "cdk" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "aws-cdk", "version": "2.178.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb8cfd011148f748e15fab1f8eaa898211b191f8754f8493c58ddc72e458f0ec7300ad4563a5cb8ca0714b25e2f632456b7bfd9cde7bc7b5b7daee216438fa83" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-cdk@2.178.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.178.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws-cdk@2.178.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.178.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/cdk/node_modules/.bin/cdk" }, { "name": "cdx:npm:bin", "value": "cdk" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fsevents", "version": "2.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fsevents@2.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fsevents@2.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cdk-nag", "version": "2.35.14", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "50d6a0cca6b46eb8bf37aa7587272a228b9eebb29fcee20a42b1ab19cb045a14db277771474bd880a310c0296d9b67526bd8ab5f725770d6320e724dc5f9be48" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cdk-nag@2.35.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cdk-nag/-/cdk-nag-2.35.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cdk-nag@2.35.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cdk-nag/-/cdk-nag-2.35.14.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cdk-serverless-clamscan", "version": "2.10.28", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "cad4c3d65e8c4a8ee2c27f477e1c871c2db3491461c28b1f32f977f732333c74f022868a45affdb085edadb73730802a4e181e9472522d859ebdbeddd9825fd8" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cdk-serverless-clamscan@2.10.28", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cdk-serverless-clamscan/-/cdk-serverless-clamscan-2.10.28.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cdk-serverless-clamscan@2.10.28", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cdk-serverless-clamscan/-/cdk-serverless-clamscan-2.10.28.tgz" }, { "name": "ImportedModules", "value": "cdk-serverless-clamscan,ServerlessClamscan,cdk-serverless-clamscan/ServerlessClamscan" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "dist/cjs/index.cjs", "line": 1 }, { "location": "dist/esm/index.mjs", "line": 1 }, { "location": "src/storage.ts", "line": 13 } ] } }, { "group": "", "name": "object-hash", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4529fd17af0f8c7f47aad96db129ea602d575e859ef418eee7edb5dd1f7c70d1adb5a83dabdc80393cdd6ecaaf21aeda366e567df059169598af6696ae495603" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-hash@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-hash@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "object-hash", "version": "3.0.6", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "7ce055f02d4522ed842e29e820b43e029c5c50acf89e0abe216518af14868d7cf38d400b8a38a56a6a7090c804b49fa1da78c05b7a62f39dd0a7335508707bdf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/object-hash@3.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/object-hash/-/object-hash-3.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/object-hash@3.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/object-hash/-/object-hash-3.0.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/object-hash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/tslib@2.8.1", "dependsOn": [] }, { "ref": "pkg:npm/@smithy/types@4.19.0", "dependsOn": [ "pkg:npm/tslib@2.8.1" ] }, { "ref": "pkg:npm/@aws-sdk/types@3.734.0", "dependsOn": [ "pkg:npm/@smithy/types@4.19.0", "pkg:npm/tslib@2.8.1" ] }, { "ref": "pkg:npm/@medplum/core@3.3.1", "dependsOn": [] }, { "ref": "pkg:npm/constructs@10.4.2", "dependsOn": [] }, { "ref": "pkg:npm/@aws-cdk/asset-awscli-v1@2.2.295", "dependsOn": [] }, { "ref": "pkg:npm/@aws-cdk/asset-kubectl-v20@2.1.4", "dependsOn": [] }, { "ref": "pkg:npm/@aws-cdk/asset-node-proxy-agent-v6@2.1.3", "dependsOn": [] }, { "ref": "pkg:npm/jsonschema@1.4.1", "dependsOn": [] }, { "ref": "pkg:npm/semver@7.7.1", "dependsOn": [] }, { "ref": "pkg:npm/@aws-cdk/cloud-assembly-schema@39.2.20", "dependsOn": [ "pkg:npm/jsonschema@1.4.1", "pkg:npm/semver@7.7.1" ] }, { "ref": "pkg:npm/@balena/dockerignore@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/case@1.6.3", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@4.2.11", "dependsOn": [] }, { "ref": "pkg:npm/universalify@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/jsonfile@6.1.0", "dependsOn": [ "pkg:npm/graceful-fs@4.2.11", "pkg:npm/universalify@2.0.1" ] }, { "ref": "pkg:npm/fs-extra@11.3.0", "dependsOn": [ "pkg:npm/graceful-fs@4.2.11", "pkg:npm/jsonfile@6.1.0", "pkg:npm/universalify@2.0.1" ] }, { "ref": "pkg:npm/ignore@5.3.2", "dependsOn": [] }, { "ref": "pkg:npm/jsonschema@1.5.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-db@1.52.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-types@2.1.35", "dependsOn": [ "pkg:npm/mime-db@1.52.0" ] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.2", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.1.2", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/punycode@2.3.1", "dependsOn": [] }, { "ref": "pkg:npm/semver@7.6.3", "dependsOn": [] }, { "ref": "pkg:npm/fast-deep-equal@3.1.3", "dependsOn": [] }, { "ref": "pkg:npm/fast-uri@3.0.6", "dependsOn": [] }, { "ref": "pkg:npm/json-schema-traverse@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/require-from-string@2.0.2", "dependsOn": [] }, { "ref": "pkg:npm/ajv@8.17.1", "dependsOn": [ "pkg:npm/fast-deep-equal@3.1.3", "pkg:npm/fast-uri@3.0.6", "pkg:npm/json-schema-traverse@1.0.0", "pkg:npm/require-from-string@2.0.2" ] }, { "ref": "pkg:npm/lodash.truncate@4.4.2", "dependsOn": [] }, { "ref": "pkg:npm/color-name@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/color-convert@2.0.1", "dependsOn": [ "pkg:npm/color-name@1.1.4" ] }, { "ref": "pkg:npm/ansi-styles@4.3.0", "dependsOn": [ "pkg:npm/color-convert@2.0.1" ] }, { "ref": "pkg:npm/astral-regex@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/slice-ansi@4.0.0", "dependsOn": [ "pkg:npm/ansi-styles@4.3.0", "pkg:npm/astral-regex@2.0.0", "pkg:npm/is-fullwidth-code-point@3.0.0" ] }, { "ref": "pkg:npm/emoji-regex@8.0.0", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@5.0.1", "dependsOn": [] }, { "ref": "pkg:npm/strip-ansi@6.0.1", "dependsOn": [ "pkg:npm/ansi-regex@5.0.1" ] }, { "ref": "pkg:npm/string-width@4.2.3", "dependsOn": [ "pkg:npm/emoji-regex@8.0.0", "pkg:npm/is-fullwidth-code-point@3.0.0", "pkg:npm/strip-ansi@6.0.1" ] }, { "ref": "pkg:npm/table@6.9.0", "dependsOn": [ "pkg:npm/ajv@8.17.1", "pkg:npm/lodash.truncate@4.4.2", "pkg:npm/slice-ansi@4.0.0", "pkg:npm/string-width@4.2.3", "pkg:npm/strip-ansi@6.0.1" ] }, { "ref": "pkg:npm/yaml@1.10.2", "dependsOn": [] }, { "ref": "pkg:npm/aws-cdk-lib@2.178.1", "dependsOn": [ "pkg:npm/@aws-cdk/asset-awscli-v1@2.2.295", "pkg:npm/@aws-cdk/asset-kubectl-v20@2.1.4", "pkg:npm/@aws-cdk/asset-node-proxy-agent-v6@2.1.3", "pkg:npm/@aws-cdk/cloud-assembly-schema@39.2.20", "pkg:npm/@balena/dockerignore@1.0.2", "pkg:npm/case@1.6.3", "pkg:npm/constructs@10.4.2", "pkg:npm/fs-extra@11.3.0", "pkg:npm/ignore@5.3.2", "pkg:npm/jsonschema@1.5.0", "pkg:npm/mime-types@2.1.35", "pkg:npm/minimatch@3.1.2", "pkg:npm/punycode@2.3.1", "pkg:npm/semver@7.6.3", "pkg:npm/table@6.9.0", "pkg:npm/yaml@1.10.2" ] }, { "ref": "pkg:npm/fsevents@2.3.2", "dependsOn": [] }, { "ref": "pkg:npm/aws-cdk@2.178.1", "dependsOn": [ "pkg:npm/fsevents@2.3.2" ] }, { "ref": "pkg:npm/cdk@2.178.1", "dependsOn": [ "pkg:npm/aws-cdk@2.178.1" ] }, { "ref": "pkg:npm/cdk-nag@2.35.14", "dependsOn": [ "pkg:npm/aws-cdk-lib@2.178.1", "pkg:npm/constructs@10.4.2" ] }, { "ref": "pkg:npm/cdk-serverless-clamscan@2.10.28", "dependsOn": [ "pkg:npm/aws-cdk-lib@2.178.1", "pkg:npm/constructs@10.4.2" ] }, { "ref": "pkg:npm/object-hash@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@types/object-hash@3.0.6", "dependsOn": [] }, { "ref": "pkg:npm/@medplum/cdk@3.3.1-tuxcare.3", "dependsOn": [ "pkg:npm/@aws-sdk/types@3.734.0", "pkg:npm/@medplum/core@3.3.1", "pkg:npm/@types/object-hash@3.0.6", "pkg:npm/aws-cdk-lib@2.178.1", "pkg:npm/cdk-nag@2.35.14", "pkg:npm/cdk-serverless-clamscan@2.10.28", "pkg:npm/cdk@2.178.1", "pkg:npm/constructs@10.4.2", "pkg:npm/object-hash@3.0.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@medplum/cdk@3.3.1-tuxcare.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-24T23:03:28Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'cdk' with version '3.3.1-tuxcare.3'. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }