{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:6ca5646a-1cc3-4235-9cc6-7e7638e26286", "version": 1, "metadata": { "timestamp": "2026-10-24T20:52:55Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "openinference-instrumentation-bedrock", "group": "@arizeai", "version": "0.4.16", "description": "OpenInference instrumentation for AWS Bedrock", "purl": "pkg:npm/%40arizeai/openinference-instrumentation-bedrock@0.4.16", "bom-ref": "pkg:npm/@arizeai/openinference-instrumentation-bedrock@0.4.16", "author": "oss-devs@arize.com", "properties": [ { "name": "cdx:npm:scripts", "value": "prebuild, build, postbuild, version:update, type:check, test, validate:invoke-model, validate:converse-comprehensive, validate:converse-stream" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Arize-ai/openinference.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@arizeai\\n@aws-sdk\\n@opentelemetry\\n@smithy\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@arizeai/openinference-core/package.json\\nnode_modules/@arizeai/openinference-semantic-conventions/package.json\\nnode_modules/@aws-sdk/client-bedrock-runtime/package.json\\nnode_modules/@opentelemetry/api/package.json\\nnode_modules/@opentelemetry/core/package.json\\nnode_modules/@opentelemetry/exporter-trace-otlp-proto/package.json\\nnode_modules/@opentelemetry/instrumentation/package.json\\nnode_modules/@opentelemetry/resources/package.json\\nnode_modules/@opentelemetry/sdk-trace-base/package.json\\nnode_modules/@opentelemetry/sdk-trace-node/package.json\\nnode_modules/@opentelemetry/semantic-conventions/package.json\\nnode_modules/@smithy/node-http-handler/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/nock/package.json\\nnode_modules/tsx/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.0.4", "description": "Next generation testing framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.0.4", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Hiroki Osame " } ], "group": "", "name": "tsx", "version": "4.20.6", "description": "TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsx@4.20.6", "externalReferences": [ { "type": "website", "url": "https://tsx.is" } ], "type": "library", "bom-ref": "pkg:npm/tsx@4.20.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tsx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsx/package.json" } ], "concludedValue": "node_modules/tsx/package.json" } ] } }, { "authors": [ { "name": "Pedro Teixeira " } ], "group": "", "name": "nock", "version": "13.5.6", "description": "HTTP server mocking and expectations library for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nock@13.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nock/nock.git" } ], "type": "library", "bom-ref": "pkg:npm/nock@13.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/nock/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nock/package.json" } ], "concludedValue": "node_modules/nock/package.json" } ] } }, { "group": "@types", "name": "node", "version": "20.19.23", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@20.19.23", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.19.23", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "AWS SDK for JavaScript Team (https://aws.amazon.com/javascript/)" } ], "group": "@smithy", "name": "node-http-handler", "version": "4.4.3", "description": "Provides a way to make requests", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40smithy/node-http-handler@4.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/node-http-handler" }, { "type": "vcs", "url": "https://github.com/smithy-lang/smithy-typescript.git" } ], "type": "library", "bom-ref": "pkg:npm/@smithy/node-http-handler@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@smithy/node-http-handler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@smithy/node-http-handler/package.json" } ], "concludedValue": "node_modules/@smithy/node-http-handler/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "semantic-conventions", "version": "1.37.0", "description": "OpenTelemetry semantic conventions", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/semantic-conventions@1.37.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/semantic-conventions@1.37.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/semantic-conventions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/semantic-conventions/package.json" } ], "concludedValue": "node_modules/@opentelemetry/semantic-conventions/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-node", "version": "1.30.1", "description": "OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-node@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-node" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-node@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/sdk-trace-node,ConsoleSpanExporter,@opentelemetry/sdk-trace-node/ConsoleSpanExporter,NodeTracerProvider,@opentelemetry/sdk-trace-node/NodeTracerProvider,SimpleSpanProcessor,@opentelemetry/sdk-trace-node/SimpleSpanProcessor,SpanExporter,@opentelemetry/sdk-trace-node/SpanExporter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ], "occurrences": [ { "location": "scripts/validate-converse-comprehensive.ts", "line": 35 }, { "location": "scripts/validate-converse-stream.ts", "line": 30 }, { "location": "scripts/validate-converse-stream.ts", "line": 35 }, { "location": "scripts/validate-invoke-model.ts", "line": 29 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-base", "version": "1.30.1", "description": "OpenTelemetry Tracing", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-base@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-base" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-base@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "resources", "version": "1.30.1", "description": "OpenTelemetry SDK resources", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/resources@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-resources" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/resources@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/resources/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/resources,Resource,@opentelemetry/resources/Resource" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/resources/package.json" } ], "concludedValue": "node_modules/@opentelemetry/resources/package.json" } ], "occurrences": [ { "location": "scripts/validate-converse-comprehensive.ts", "line": 30 }, { "location": "scripts/validate-converse-stream.ts", "line": 29 }, { "location": "scripts/validate-invoke-model.ts", "line": 24 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "instrumentation", "version": "0.46.0", "description": "Base class for node which OpenTelemetry instrumentation modules extend", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/instrumentation@0.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-instrumentation" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/instrumentation@0.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/instrumentation/package.json" }, { "name": "ExportedModules", "value": "instrumentation,BedrockInstrumentation,instrumentation/BedrockInstrumentation,isPatched,instrumentation/isPatched" }, { "name": "ImportedModules", "value": "@opentelemetry/instrumentation,InstrumentationBase,@opentelemetry/instrumentation/InstrumentationBase,InstrumentationNodeModuleDefinition,@opentelemetry/instrumentation/InstrumentationNodeModuleDefinition,registerInstrumentations,@opentelemetry/instrumentation/registerInstrumentations,InstrumentationConfig,@opentelemetry/instrumentation/InstrumentationConfig,InstrumentationModuleDefinition,@opentelemetry/instrumentation/InstrumentationModuleDefinition" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/instrumentation/package.json" } ], "concludedValue": "node_modules/@opentelemetry/instrumentation/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 4 }, { "location": "dist/esnext/instrumentation.js", "line": 4 }, { "location": "dist/src/instrumentation.js", "line": 8 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 29 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 147 }, { "location": "scripts/validate-converse-stream.ts", "line": 28 }, { "location": "scripts/validate-converse-stream.ts", "line": 146 }, { "location": "scripts/validate-invoke-model.ts", "line": 23 }, { "location": "scripts/validate-invoke-model.ts", "line": 147 }, { "location": "src/instrumentation.ts", "line": 19 }, { "location": "src/instrumentation.ts", "line": 23 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "exporter-trace-otlp-proto", "version": "0.46.0", "description": "OpenTelemetry Collector Exporter allows user to send collected traces to the OpenTelemetry Collector using protobuf over HTTP", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/exporter-trace-otlp-proto@0.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/exporter-trace-otlp-proto" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/exporter-trace-otlp-proto@0.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/exporter-trace-otlp-proto,OTLPTraceExporter,@opentelemetry/exporter-trace-otlp-proto/OTLPTraceExporter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ], "concludedValue": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ], "occurrences": [ { "location": "scripts/validate-converse-comprehensive.ts", "line": 28 }, { "location": "scripts/validate-converse-stream.ts", "line": 27 }, { "location": "scripts/validate-invoke-model.ts", "line": 22 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "core", "version": "1.30.1", "description": "OpenTelemetry Core provides constants and utilities shared by all OpenTelemetry SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/core@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-core" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/core@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/core/package.json" } ], "concludedValue": "node_modules/@opentelemetry/core/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "api", "version": "1.9.0", "description": "Public API for OpenTelemetry", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/api@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/api" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/api@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/api/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/api,diag,@opentelemetry/api/diag,context,@opentelemetry/api/context,SpanKind,@opentelemetry/api/SpanKind,SpanStatusCode,@opentelemetry/api/SpanStatusCode,DiagConsoleLogger,@opentelemetry/api/DiagConsoleLogger,DiagLogLevel,@opentelemetry/api/DiagLogLevel,Attributes,@opentelemetry/api/Attributes,AttributeValue,@opentelemetry/api/AttributeValue,Span,@opentelemetry/api/Span,Tracer,@opentelemetry/api/Tracer,TracerProvider,@opentelemetry/api/TracerProvider" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/api/package.json" } ], "concludedValue": "node_modules/@opentelemetry/api/package.json" } ], "occurrences": [ { "location": "dist/esm/attributes/attribute-helpers.js", "line": 1 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 90 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 94 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 1 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 96 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 1 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 119 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 11 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 221 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 1 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 63 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 432 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 464 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 591 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 715 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 820 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 10 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 199 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 9 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 77 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 148 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 12 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 315 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 398 }, { "location": "dist/esm/instrumentation.js", "line": 3 }, { "location": "dist/esm/instrumentation.js", "line": 54 }, { "location": "dist/esm/instrumentation.js", "line": 88 }, { "location": "dist/esm/instrumentation.js", "line": 124 }, { "location": "dist/esm/instrumentation.js", "line": 146 }, { "location": "dist/esm/instrumentation.js", "line": 153 }, { "location": "dist/esm/instrumentation.js", "line": 214 }, { "location": "dist/esm/instrumentation.js", "line": 226 }, { "location": "dist/esm/instrumentation.js", "line": 278 }, { "location": "dist/esm/instrumentation.js", "line": 312 }, { "location": "dist/esm/instrumentation.js", "line": 319 }, { "location": "dist/esm/instrumentation.js", "line": 376 }, { "location": "dist/esm/instrumentation.js", "line": 387 }, { "location": "dist/esm/instrumentation.js", "line": 432 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 1 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 90 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 94 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 1 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 96 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 1 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 119 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 18 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 234 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 12 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 75 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 445 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 477 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 605 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 729 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 835 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 10 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 200 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 9 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 77 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 148 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 19 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 338 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 434 }, { "location": "dist/esnext/instrumentation.js", "line": 3 }, { "location": "dist/esnext/instrumentation.js", "line": 55 }, { "location": "dist/esnext/instrumentation.js", "line": 89 }, { "location": "dist/esnext/instrumentation.js", "line": 125 }, { "location": "dist/esnext/instrumentation.js", "line": 147 }, { "location": "dist/esnext/instrumentation.js", "line": 154 }, { "location": "dist/esnext/instrumentation.js", "line": 215 }, { "location": "dist/esnext/instrumentation.js", "line": 227 }, { "location": "dist/esnext/instrumentation.js", "line": 279 }, { "location": "dist/esnext/instrumentation.js", "line": 313 }, { "location": "dist/esnext/instrumentation.js", "line": 320 }, { "location": "dist/esnext/instrumentation.js", "line": 377 }, { "location": "dist/esnext/instrumentation.js", "line": 388 }, { "location": "dist/esnext/instrumentation.js", "line": 433 }, { "location": "dist/src/attributes/attribute-helpers.js", "line": 12 }, { "location": "dist/src/attributes/converse-request-attributes.js", "line": 4 }, { "location": "dist/src/attributes/converse-response-attributes.js", "line": 4 }, { "location": "dist/src/attributes/converse-streaming-response-attributes.js", "line": 30 }, { "location": "dist/src/attributes/invoke-model-helpers.js", "line": 21 }, { "location": "dist/src/attributes/invoke-model-request-attributes.js", "line": 13 }, { "location": "dist/src/attributes/invoke-model-response-attributes.js", "line": 12 }, { "location": "dist/src/attributes/invoke-model-streaming-response-attributes.js", "line": 32 }, { "location": "dist/src/instrumentation.js", "line": 7 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 27 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 90 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 593 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 598 }, { "location": "scripts/validate-converse-stream.ts", "line": 26 }, { "location": "scripts/validate-converse-stream.ts", "line": 89 }, { "location": "scripts/validate-converse-stream.ts", "line": 387 }, { "location": "scripts/validate-converse-stream.ts", "line": 392 }, { "location": "scripts/validate-invoke-model.ts", "line": 21 }, { "location": "scripts/validate-invoke-model.ts", "line": 90 }, { "location": "scripts/validate-invoke-model.ts", "line": 675 }, { "location": "scripts/validate-invoke-model.ts", "line": 680 }, { "location": "src/attributes/attribute-helpers.ts", "line": 7 }, { "location": "src/attributes/attribute-helpers.ts", "line": 8 }, { "location": "src/attributes/attribute-helpers.ts", "line": 120 }, { "location": "src/attributes/attribute-helpers.ts", "line": 124 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 9 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 10 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 152 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 7 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 8 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 174 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 12 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 13 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 299 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 2 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 84 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 529 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 563 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 716 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 855 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 964 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 12 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 13 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 343 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 11 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 12 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 132 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 235 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 14 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 15 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 491 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 584 }, { "location": "src/instrumentation.ts", "line": 14 }, { "location": "src/instrumentation.ts", "line": 15 }, { "location": "src/instrumentation.ts", "line": 125 }, { "location": "src/instrumentation.ts", "line": 168 }, { "location": "src/instrumentation.ts", "line": 218 }, { "location": "src/instrumentation.ts", "line": 249 }, { "location": "src/instrumentation.ts", "line": 259 }, { "location": "src/instrumentation.ts", "line": 327 }, { "location": "src/instrumentation.ts", "line": 342 }, { "location": "src/instrumentation.ts", "line": 395 }, { "location": "src/instrumentation.ts", "line": 438 }, { "location": "src/instrumentation.ts", "line": 448 }, { "location": "src/instrumentation.ts", "line": 512 }, { "location": "src/instrumentation.ts", "line": 526 }, { "location": "src/instrumentation.ts", "line": 573 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "AWS SDK for JavaScript Team (https://aws.amazon.com/javascript/)" } ], "group": "@aws-sdk", "name": "client-bedrock-runtime", "version": "3.916.0", "description": "AWS SDK for JavaScript Bedrock Runtime Client for Node.js, Browser and React Native", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-sdk/client-bedrock-runtime@3.916.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-bedrock-runtime" }, { "type": "vcs", "url": "https://github.com/aws/aws-sdk-js-v3.git" } ], "type": "framework", "bom-ref": "pkg:npm/@aws-sdk/client-bedrock-runtime@3.916.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@aws-sdk/client-bedrock-runtime/package.json" }, { "name": "ImportedModules", "value": "@aws-sdk/client-bedrock-runtime,ConverseCommand,@aws-sdk/client-bedrock-runtime/ConverseCommand,ConverseStreamCommand,@aws-sdk/client-bedrock-runtime/ConverseStreamCommand,InvokeModelCommand,@aws-sdk/client-bedrock-runtime/InvokeModelCommand,InvokeModelWithResponseStreamCommand,@aws-sdk/client-bedrock-runtime/InvokeModelWithResponseStreamCommand,ContentBlock,@aws-sdk/client-bedrock-runtime/ContentBlock,ConversationRole,@aws-sdk/client-bedrock-runtime/ConversationRole,Message,@aws-sdk/client-bedrock-runtime/Message,SystemContentBlock,@aws-sdk/client-bedrock-runtime/SystemContentBlock,ConverseRequest,@aws-sdk/client-bedrock-runtime/ConverseRequest,ToolConfiguration,@aws-sdk/client-bedrock-runtime/ToolConfiguration,ConverseOutput,@aws-sdk/client-bedrock-runtime/ConverseOutput,ConverseResponse,@aws-sdk/client-bedrock-runtime/ConverseResponse,TokenUsage,@aws-sdk/client-bedrock-runtime/TokenUsage,InvokeModelResponse,@aws-sdk/client-bedrock-runtime/InvokeModelResponse,BedrockRuntimeClient,@aws-sdk/client-bedrock-runtime/BedrockRuntimeClient" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@aws-sdk/client-bedrock-runtime/package.json" } ], "concludedValue": "node_modules/@aws-sdk/client-bedrock-runtime/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 2 }, { "location": "dist/esnext/instrumentation.js", "line": 2 }, { "location": "dist/src/instrumentation.js", "line": 6 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 139 }, { "location": "scripts/validate-converse-stream.ts", "line": 138 }, { "location": "scripts/validate-invoke-model.ts", "line": 138 }, { "location": "src/attributes/attribute-helpers.ts", "line": 6 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 8 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 6 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 1 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 11 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 10 }, { "location": "src/instrumentation.ts", "line": 7 }, { "location": "src/instrumentation.ts", "line": 13 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-semantic-conventions", "version": "2.5.0", "description": "This package provides OpenInference semantic conventions for tracing of LLM Applications.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-semantic-conventions@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-semantic-conventions" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-semantic-conventions@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-semantic-conventions,LLMProvider,@arizeai/openinference-semantic-conventions/LLMProvider,LLMSystem,@arizeai/openinference-semantic-conventions/LLMSystem,OpenInferenceSpanKind,@arizeai/openinference-semantic-conventions/OpenInferenceSpanKind,SemanticConventions,@arizeai/openinference-semantic-conventions/SemanticConventions,MimeType,@arizeai/openinference-semantic-conventions/MimeType,SEMRESATTRS_PROJECT_NAME,@arizeai/openinference-semantic-conventions/SEMRESATTRS_PROJECT_NAME" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "occurrences": [ { "location": "dist/esm/attributes/attribute-helpers.js", "line": 3 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 3 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 3 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 13 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 3 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 12 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 11 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 14 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 3 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 3 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 3 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 20 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 14 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 12 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 11 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 21 }, { "location": "dist/src/attributes/attribute-helpers.js", "line": 14 }, { "location": "dist/src/attributes/converse-request-attributes.js", "line": 6 }, { "location": "dist/src/attributes/converse-response-attributes.js", "line": 6 }, { "location": "dist/src/attributes/converse-streaming-response-attributes.js", "line": 32 }, { "location": "dist/src/attributes/invoke-model-helpers.js", "line": 23 }, { "location": "dist/src/attributes/invoke-model-request-attributes.js", "line": 15 }, { "location": "dist/src/attributes/invoke-model-response-attributes.js", "line": 14 }, { "location": "dist/src/attributes/invoke-model-streaming-response-attributes.js", "line": 34 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 44 }, { "location": "scripts/validate-converse-stream.ts", "line": 44 }, { "location": "scripts/validate-invoke-model.ts", "line": 38 }, { "location": "src/attributes/attribute-helpers.ts", "line": 16 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 13 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 11 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 22 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 5 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 20 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 15 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 16 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 18 } ] } }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-core", "version": "2.4.0", "description": "OpenInference Core provides utilities shared by all OpenInference SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-core@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-core" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-core@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-core/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-core,safelyJSONStringify,@arizeai/openinference-core/safelyJSONStringify,withSafety,@arizeai/openinference-core/withSafety,isObjectWithStringKeys,@arizeai/openinference-core/isObjectWithStringKeys,assertUnreachable,@arizeai/openinference-core/assertUnreachable,safelyJSONParse,@arizeai/openinference-core/safelyJSONParse,getAttributesFromContext,@arizeai/openinference-core/getAttributesFromContext,OITracer,@arizeai/openinference-core/OITracer,setMetadata,@arizeai/openinference-core/setMetadata,setPromptTemplate,@arizeai/openinference-core/setPromptTemplate,setSession,@arizeai/openinference-core/setSession,setTags,@arizeai/openinference-core/setTags,setUser,@arizeai/openinference-core/setUser,TraceConfigOptions,@arizeai/openinference-core/TraceConfigOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-core/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-core/package.json" } ], "occurrences": [ { "location": "dist/esm/attributes/attribute-helpers.js", "line": 2 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 82 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 165 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 2 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 13 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 85 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 2 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 14 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 108 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 12 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 75 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 76 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 115 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 148 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 161 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 199 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 2 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 38 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 369 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 445 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 661 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 731 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 11 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 158 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 162 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 188 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 10 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 61 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 126 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 13 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 21 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 22 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 29 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 343 }, { "location": "dist/esm/instrumentation.js", "line": 5 }, { "location": "dist/esm/instrumentation.js", "line": 146 }, { "location": "dist/esm/instrumentation.js", "line": 214 }, { "location": "dist/esm/instrumentation.js", "line": 312 }, { "location": "dist/esm/instrumentation.js", "line": 376 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 2 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 82 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 165 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 2 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 13 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 85 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 2 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 14 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 108 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 19 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 84 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 85 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 125 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 148 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 161 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 199 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 13 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 49 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 382 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 458 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 675 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 745 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 11 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 159 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 163 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 189 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 10 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 61 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 126 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 20 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 28 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 29 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 36 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 366 }, { "location": "dist/esnext/instrumentation.js", "line": 5 }, { "location": "dist/esnext/instrumentation.js", "line": 147 }, { "location": "dist/esnext/instrumentation.js", "line": 215 }, { "location": "dist/esnext/instrumentation.js", "line": 313 }, { "location": "dist/esnext/instrumentation.js", "line": 377 }, { "location": "dist/src/attributes/attribute-helpers.js", "line": 13 }, { "location": "dist/src/attributes/converse-request-attributes.js", "line": 5 }, { "location": "dist/src/attributes/converse-response-attributes.js", "line": 5 }, { "location": "dist/src/attributes/converse-streaming-response-attributes.js", "line": 31 }, { "location": "dist/src/attributes/invoke-model-helpers.js", "line": 22 }, { "location": "dist/src/attributes/invoke-model-request-attributes.js", "line": 14 }, { "location": "dist/src/attributes/invoke-model-response-attributes.js", "line": 13 }, { "location": "dist/src/attributes/invoke-model-streaming-response-attributes.js", "line": 33 }, { "location": "dist/src/instrumentation.js", "line": 9 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 43 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 594 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 595 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 596 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 597 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 598 }, { "location": "scripts/validate-converse-stream.ts", "line": 43 }, { "location": "scripts/validate-converse-stream.ts", "line": 388 }, { "location": "scripts/validate-converse-stream.ts", "line": 389 }, { "location": "scripts/validate-converse-stream.ts", "line": 390 }, { "location": "scripts/validate-converse-stream.ts", "line": 391 }, { "location": "scripts/validate-converse-stream.ts", "line": 392 }, { "location": "scripts/validate-invoke-model.ts", "line": 37 }, { "location": "scripts/validate-invoke-model.ts", "line": 676 }, { "location": "scripts/validate-invoke-model.ts", "line": 677 }, { "location": "scripts/validate-invoke-model.ts", "line": 678 }, { "location": "scripts/validate-invoke-model.ts", "line": 679 }, { "location": "scripts/validate-invoke-model.ts", "line": 680 }, { "location": "src/attributes/attribute-helpers.ts", "line": 10 }, { "location": "src/attributes/attribute-helpers.ts", "line": 112 }, { "location": "src/attributes/attribute-helpers.ts", "line": 201 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 12 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 30 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 134 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 10 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 24 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 162 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 21 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 108 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 109 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 152 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 201 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 233 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 275 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 4 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 62 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 466 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 544 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 796 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 872 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 15 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 284 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 289 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 323 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 14 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 107 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 202 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 17 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 81 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 82 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 91 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 520 }, { "location": "src/instrumentation.ts", "line": 25 }, { "location": "src/instrumentation.ts", "line": 26 }, { "location": "src/instrumentation.ts", "line": 249 }, { "location": "src/instrumentation.ts", "line": 327 }, { "location": "src/instrumentation.ts", "line": 438 }, { "location": "src/instrumentation.ts", "line": 512 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@arizeai/openinference-instrumentation-bedrock@0.4.16" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-24T20:52:55Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'openinference-instrumentation-bedrock' with version '0.4.16'. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from 17 source files." } ] }