{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:06d0c40b-f4b0-4f76-b1ae-5c80de99c086", "version": 1, "metadata": { "timestamp": "2026-10-24T21:27:55Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "openinference-instrumentation-bedrock", "group": "@arizeai", "version": "0.5.5", "description": "OpenInference instrumentation for AWS Bedrock", "purl": "pkg:npm/%40arizeai/openinference-instrumentation-bedrock@0.5.5", "bom-ref": "pkg:npm/@arizeai/openinference-instrumentation-bedrock@0.5.5", "author": "oss-devs@arize.com", "properties": [ { "name": "cdx:npm:scripts", "value": "prebuild, build, postbuild, version:update, type:check, test, validate:invoke-model, validate:converse-comprehensive, validate:converse-stream" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Arize-ai/openinference.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@arizeai\\n@aws-sdk\\n@opentelemetry\\n@smithy\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@arizeai/openinference-core/package.json\\nnode_modules/@arizeai/openinference-semantic-conventions/package.json\\nnode_modules/@aws-sdk/client-bedrock-runtime/package.json\\nnode_modules/@opentelemetry/api/package.json\\nnode_modules/@opentelemetry/core/package.json\\nnode_modules/@opentelemetry/exporter-trace-otlp-proto/package.json\\nnode_modules/@opentelemetry/instrumentation/package.json\\nnode_modules/@opentelemetry/resources/package.json\\nnode_modules/@opentelemetry/sdk-trace-base/package.json\\nnode_modules/@opentelemetry/sdk-trace-node/package.json\\nnode_modules/@opentelemetry/semantic-conventions/package.json\\nnode_modules/@smithy/node-http-handler/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/nock/package.json\\nnode_modules/tsx/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.1.11", "description": "Next generation testing framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.1.11", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "7.0.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@7.0.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Hiroki Osame " } ], "group": "", "name": "tsx", "version": "4.20.6", "description": "TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsx@4.20.6", "externalReferences": [ { "type": "website", "url": "https://tsx.is" } ], "type": "library", "bom-ref": "pkg:npm/tsx@4.20.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tsx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsx/package.json" } ], "concludedValue": "node_modules/tsx/package.json" } ] } }, { "authors": [ { "name": "Pedro Teixeira " } ], "group": "", "name": "nock", "version": "13.5.6", "description": "HTTP server mocking and expectations library for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nock@13.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nock/nock.git" } ], "type": "library", "bom-ref": "pkg:npm/nock@13.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/nock/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nock/package.json" } ], "concludedValue": "node_modules/nock/package.json" } ] } }, { "group": "@types", "name": "node", "version": "20.19.23", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@20.19.23", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.19.23", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "AWS SDK for JavaScript Team (https://aws.amazon.com/javascript/)" } ], "group": "@smithy", "name": "node-http-handler", "version": "4.4.3", "description": "Provides a way to make requests", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40smithy/node-http-handler@4.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/node-http-handler" }, { "type": "vcs", "url": "https://github.com/smithy-lang/smithy-typescript.git" } ], "type": "library", "bom-ref": "pkg:npm/@smithy/node-http-handler@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@smithy/node-http-handler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@smithy/node-http-handler/package.json" } ], "concludedValue": "node_modules/@smithy/node-http-handler/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "semantic-conventions", "version": "1.37.0", "description": "OpenTelemetry semantic conventions", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/semantic-conventions@1.37.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/semantic-conventions@1.37.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/semantic-conventions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/semantic-conventions/package.json" } ], "concludedValue": "node_modules/@opentelemetry/semantic-conventions/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-node", "version": "1.30.1", "description": "OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-node@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-node" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-node@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/sdk-trace-node,ConsoleSpanExporter,@opentelemetry/sdk-trace-node/ConsoleSpanExporter,NodeTracerProvider,@opentelemetry/sdk-trace-node/NodeTracerProvider,SimpleSpanProcessor,@opentelemetry/sdk-trace-node/SimpleSpanProcessor,SpanExporter,@opentelemetry/sdk-trace-node/SpanExporter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ], "occurrences": [ { "location": "scripts/validate-converse-comprehensive.ts", "line": 35 }, { "location": "scripts/validate-converse-reasoning.ts", "line": 11 }, { "location": "scripts/validate-converse-stream.ts", "line": 30 }, { "location": "scripts/validate-converse-stream.ts", "line": 35 }, { "location": "scripts/validate-invoke-model.ts", "line": 29 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-base", "version": "1.30.1", "description": "OpenTelemetry Tracing", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-base@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-base" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-base@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "resources", "version": "1.30.1", "description": "OpenTelemetry SDK resources", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/resources@1.30.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-resources" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/resources@1.30.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/resources/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/resources,Resource,@opentelemetry/resources/Resource" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/resources/package.json" } ], "concludedValue": "node_modules/@opentelemetry/resources/package.json" } ], "occurrences": [ { "location": "scripts/validate-converse-comprehensive.ts", "line": 30 }, { "location": "scripts/validate-converse-stream.ts", "line": 29 }, { "location": "scripts/validate-invoke-model.ts", "line": 24 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "instrumentation", "version": "0.46.0", "description": "Base class for node which OpenTelemetry instrumentation modules extend", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/instrumentation@0.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-instrumentation" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/instrumentation@0.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/instrumentation/package.json" }, { "name": "ExportedModules", "value": "instrumentation,BedrockInstrumentation,instrumentation/BedrockInstrumentation,isPatched,instrumentation/isPatched" }, { "name": "ImportedModules", "value": "@opentelemetry/instrumentation,InstrumentationBase,@opentelemetry/instrumentation/InstrumentationBase,InstrumentationNodeModuleDefinition,@opentelemetry/instrumentation/InstrumentationNodeModuleDefinition,registerInstrumentations,@opentelemetry/instrumentation/registerInstrumentations,InstrumentationConfig,@opentelemetry/instrumentation/InstrumentationConfig,InstrumentationModuleDefinition,@opentelemetry/instrumentation/InstrumentationModuleDefinition" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/instrumentation/package.json" } ], "concludedValue": "node_modules/@opentelemetry/instrumentation/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 3 }, { "location": "dist/esnext/instrumentation.js", "line": 3 }, { "location": "dist/src/instrumentation.js", "line": 7 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 29 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 147 }, { "location": "scripts/validate-converse-reasoning.ts", "line": 6 }, { "location": "scripts/validate-converse-reasoning.ts", "line": 38 }, { "location": "scripts/validate-converse-stream.ts", "line": 28 }, { "location": "scripts/validate-converse-stream.ts", "line": 149 }, { "location": "scripts/validate-invoke-model.ts", "line": 23 }, { "location": "scripts/validate-invoke-model.ts", "line": 147 }, { "location": "src/instrumentation.ts", "line": 17 }, { "location": "src/instrumentation.ts", "line": 21 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "exporter-trace-otlp-proto", "version": "0.46.0", "description": "OpenTelemetry Collector Exporter allows user to send collected traces to the OpenTelemetry Collector using protobuf over HTTP", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/exporter-trace-otlp-proto@0.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/exporter-trace-otlp-proto" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/exporter-trace-otlp-proto@0.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/exporter-trace-otlp-proto,OTLPTraceExporter,@opentelemetry/exporter-trace-otlp-proto/OTLPTraceExporter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ], "concludedValue": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ], "occurrences": [ { "location": "scripts/validate-converse-comprehensive.ts", "line": 28 }, { "location": "scripts/validate-converse-reasoning.ts", "line": 5 }, { "location": "scripts/validate-converse-stream.ts", "line": 27 }, { "location": "scripts/validate-invoke-model.ts", "line": 22 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "core", "version": "2.8.0", "description": "OpenTelemetry Core provides constants and utilities shared by all OpenTelemetry SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/core@2.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-core" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/core@2.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/core/package.json" } ], "concludedValue": "node_modules/@opentelemetry/core/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "api", "version": "1.9.0", "description": "Public API for OpenTelemetry", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/api@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/api" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/api@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/api/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/api,diag,@opentelemetry/api/diag,context,@opentelemetry/api/context,SpanKind,@opentelemetry/api/SpanKind,SpanStatusCode,@opentelemetry/api/SpanStatusCode,DiagConsoleLogger,@opentelemetry/api/DiagConsoleLogger,DiagLogLevel,@opentelemetry/api/DiagLogLevel,Attributes,@opentelemetry/api/Attributes,AttributeValue,@opentelemetry/api/AttributeValue,Span,@opentelemetry/api/Span,Tracer,@opentelemetry/api/Tracer,TracerProvider,@opentelemetry/api/TracerProvider" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/api/package.json" } ], "concludedValue": "node_modules/@opentelemetry/api/package.json" } ], "occurrences": [ { "location": "dist/esm/attributes/attribute-helpers.js", "line": 1 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 95 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 99 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 1 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 96 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 1 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 120 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 11 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 274 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 1 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 93 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 295 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 582 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 659 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 792 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 916 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 1051 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 10 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 220 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 9 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 77 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 149 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 12 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 42 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 415 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 516 }, { "location": "dist/esm/instrumentation.js", "line": 2 }, { "location": "dist/esm/instrumentation.js", "line": 53 }, { "location": "dist/esm/instrumentation.js", "line": 87 }, { "location": "dist/esm/instrumentation.js", "line": 157 }, { "location": "dist/esm/instrumentation.js", "line": 179 }, { "location": "dist/esm/instrumentation.js", "line": 186 }, { "location": "dist/esm/instrumentation.js", "line": 249 }, { "location": "dist/esm/instrumentation.js", "line": 261 }, { "location": "dist/esm/instrumentation.js", "line": 315 }, { "location": "dist/esm/instrumentation.js", "line": 349 }, { "location": "dist/esm/instrumentation.js", "line": 356 }, { "location": "dist/esm/instrumentation.js", "line": 415 }, { "location": "dist/esm/instrumentation.js", "line": 426 }, { "location": "dist/esm/instrumentation.js", "line": 473 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 1 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 95 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 99 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 1 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 96 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 1 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 120 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 18 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 283 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 12 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 105 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 307 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 591 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 668 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 801 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 925 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 1060 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 10 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 221 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 9 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 77 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 149 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 19 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 49 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 439 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 549 }, { "location": "dist/esnext/instrumentation.js", "line": 2 }, { "location": "dist/esnext/instrumentation.js", "line": 55 }, { "location": "dist/esnext/instrumentation.js", "line": 89 }, { "location": "dist/esnext/instrumentation.js", "line": 160 }, { "location": "dist/esnext/instrumentation.js", "line": 182 }, { "location": "dist/esnext/instrumentation.js", "line": 189 }, { "location": "dist/esnext/instrumentation.js", "line": 252 }, { "location": "dist/esnext/instrumentation.js", "line": 264 }, { "location": "dist/esnext/instrumentation.js", "line": 318 }, { "location": "dist/esnext/instrumentation.js", "line": 352 }, { "location": "dist/esnext/instrumentation.js", "line": 359 }, { "location": "dist/esnext/instrumentation.js", "line": 418 }, { "location": "dist/esnext/instrumentation.js", "line": 429 }, { "location": "dist/esnext/instrumentation.js", "line": 476 }, { "location": "dist/src/attributes/attribute-helpers.js", "line": 13 }, { "location": "dist/src/attributes/converse-request-attributes.js", "line": 4 }, { "location": "dist/src/attributes/converse-response-attributes.js", "line": 4 }, { "location": "dist/src/attributes/converse-streaming-response-attributes.js", "line": 30 }, { "location": "dist/src/attributes/invoke-model-helpers.js", "line": 22 }, { "location": "dist/src/attributes/invoke-model-request-attributes.js", "line": 13 }, { "location": "dist/src/attributes/invoke-model-response-attributes.js", "line": 12 }, { "location": "dist/src/attributes/invoke-model-streaming-response-attributes.js", "line": 32 }, { "location": "dist/src/instrumentation.js", "line": 6 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 27 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 90 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 593 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 598 }, { "location": "scripts/validate-converse-stream.ts", "line": 26 }, { "location": "scripts/validate-converse-stream.ts", "line": 92 }, { "location": "scripts/validate-converse-stream.ts", "line": 414 }, { "location": "scripts/validate-converse-stream.ts", "line": 419 }, { "location": "scripts/validate-invoke-model.ts", "line": 21 }, { "location": "scripts/validate-invoke-model.ts", "line": 90 }, { "location": "scripts/validate-invoke-model.ts", "line": 675 }, { "location": "scripts/validate-invoke-model.ts", "line": 680 }, { "location": "src/attributes/attribute-helpers.ts", "line": 2 }, { "location": "src/attributes/attribute-helpers.ts", "line": 3 }, { "location": "src/attributes/attribute-helpers.ts", "line": 122 }, { "location": "src/attributes/attribute-helpers.ts", "line": 126 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 9 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 10 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 152 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 7 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 8 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 175 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 12 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 13 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 381 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 6 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 131 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 366 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 703 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 784 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 934 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 1076 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 1227 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 15 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 16 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 378 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 11 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 12 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 133 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 241 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 15 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 16 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 141 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 627 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 739 }, { "location": "src/instrumentation.ts", "line": 12 }, { "location": "src/instrumentation.ts", "line": 13 }, { "location": "src/instrumentation.ts", "line": 120 }, { "location": "src/instrumentation.ts", "line": 163 }, { "location": "src/instrumentation.ts", "line": 247 }, { "location": "src/instrumentation.ts", "line": 278 }, { "location": "src/instrumentation.ts", "line": 288 }, { "location": "src/instrumentation.ts", "line": 358 }, { "location": "src/instrumentation.ts", "line": 373 }, { "location": "src/instrumentation.ts", "line": 428 }, { "location": "src/instrumentation.ts", "line": 471 }, { "location": "src/instrumentation.ts", "line": 481 }, { "location": "src/instrumentation.ts", "line": 547 }, { "location": "src/instrumentation.ts", "line": 561 }, { "location": "src/instrumentation.ts", "line": 610 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "AWS SDK for JavaScript Team (https://aws.amazon.com/javascript/)" } ], "group": "@aws-sdk", "name": "client-bedrock-runtime", "version": "3.916.0", "description": "AWS SDK for JavaScript Bedrock Runtime Client for Node.js, Browser and React Native", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40aws-sdk/client-bedrock-runtime@3.916.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-bedrock-runtime" }, { "type": "vcs", "url": "https://github.com/aws/aws-sdk-js-v3.git" } ], "type": "framework", "bom-ref": "pkg:npm/@aws-sdk/client-bedrock-runtime@3.916.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@aws-sdk/client-bedrock-runtime/package.json" }, { "name": "ImportedModules", "value": "@aws-sdk/client-bedrock-runtime,ConverseCommand,@aws-sdk/client-bedrock-runtime/ConverseCommand,ConverseStreamCommand,@aws-sdk/client-bedrock-runtime/ConverseStreamCommand,InvokeModelCommand,@aws-sdk/client-bedrock-runtime/InvokeModelCommand,InvokeModelWithResponseStreamCommand,@aws-sdk/client-bedrock-runtime/InvokeModelWithResponseStreamCommand,ContentBlock,@aws-sdk/client-bedrock-runtime/ContentBlock,Message,@aws-sdk/client-bedrock-runtime/Message,SystemContentBlock,@aws-sdk/client-bedrock-runtime/SystemContentBlock,ConverseRequest,@aws-sdk/client-bedrock-runtime/ConverseRequest,ToolConfiguration,@aws-sdk/client-bedrock-runtime/ToolConfiguration,ConverseOutput,@aws-sdk/client-bedrock-runtime/ConverseOutput,ConverseResponse,@aws-sdk/client-bedrock-runtime/ConverseResponse,TokenUsage,@aws-sdk/client-bedrock-runtime/TokenUsage,InvokeModelResponse,@aws-sdk/client-bedrock-runtime/InvokeModelResponse,MessageStopEvent,@aws-sdk/client-bedrock-runtime/MessageStopEvent,BedrockRuntimeClient,@aws-sdk/client-bedrock-runtime/BedrockRuntimeClient" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@aws-sdk/client-bedrock-runtime/package.json" } ], "concludedValue": "node_modules/@aws-sdk/client-bedrock-runtime/package.json" } ], "occurrences": [ { "location": "dist/esm/instrumentation.js", "line": 1 }, { "location": "dist/esnext/instrumentation.js", "line": 1 }, { "location": "dist/src/instrumentation.js", "line": 5 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 139 }, { "location": "scripts/validate-converse-reasoning.ts", "line": 34 }, { "location": "scripts/validate-converse-stream.ts", "line": 141 }, { "location": "scripts/validate-invoke-model.ts", "line": 138 }, { "location": "src/attributes/attribute-helpers.ts", "line": 1 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 8 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 6 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 5 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 14 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 10 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 14 }, { "location": "src/instrumentation.ts", "line": 5 }, { "location": "src/instrumentation.ts", "line": 11 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-semantic-conventions", "version": "2.15.0", "description": "This package provides OpenInference semantic conventions for tracing of LLM Applications.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-semantic-conventions@2.15.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-semantic-conventions" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-semantic-conventions@2.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-semantic-conventions,LLMProvider,@arizeai/openinference-semantic-conventions/LLMProvider,LLMSystem,@arizeai/openinference-semantic-conventions/LLMSystem,OpenInferenceSpanKind,@arizeai/openinference-semantic-conventions/OpenInferenceSpanKind,SemanticConventions,@arizeai/openinference-semantic-conventions/SemanticConventions,MimeType,@arizeai/openinference-semantic-conventions/MimeType,SEMRESATTRS_PROJECT_NAME,@arizeai/openinference-semantic-conventions/SEMRESATTRS_PROJECT_NAME" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "occurrences": [ { "location": "dist/esm/attributes/attribute-helpers.js", "line": 3 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 3 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 3 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 13 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 3 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 12 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 11 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 14 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 3 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 3 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 3 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 20 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 14 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 12 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 11 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 21 }, { "location": "dist/src/attributes/attribute-helpers.js", "line": 15 }, { "location": "dist/src/attributes/converse-request-attributes.js", "line": 6 }, { "location": "dist/src/attributes/converse-response-attributes.js", "line": 6 }, { "location": "dist/src/attributes/converse-streaming-response-attributes.js", "line": 32 }, { "location": "dist/src/attributes/invoke-model-helpers.js", "line": 24 }, { "location": "dist/src/attributes/invoke-model-request-attributes.js", "line": 15 }, { "location": "dist/src/attributes/invoke-model-response-attributes.js", "line": 14 }, { "location": "dist/src/attributes/invoke-model-streaming-response-attributes.js", "line": 34 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 44 }, { "location": "scripts/validate-converse-stream.ts", "line": 44 }, { "location": "scripts/validate-invoke-model.ts", "line": 38 }, { "location": "src/attributes/attribute-helpers.ts", "line": 11 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 13 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 11 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 22 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 9 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 23 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 15 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 16 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 19 } ] } }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-core", "version": "2.8.1", "description": "OpenInference Core provides utilities shared by all OpenInference SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-core@2.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-core" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-core@2.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-core/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-core,safelyJSONStringify,@arizeai/openinference-core/safelyJSONStringify,withSafety,@arizeai/openinference-core/withSafety,isObjectWithStringKeys,@arizeai/openinference-core/isObjectWithStringKeys,assertUnreachable,@arizeai/openinference-core/assertUnreachable,safelyJSONParse,@arizeai/openinference-core/safelyJSONParse,getAttributesFromContext,@arizeai/openinference-core/getAttributesFromContext,isPromise,@arizeai/openinference-core/isPromise,OITracer,@arizeai/openinference-core/OITracer,setMetadata,@arizeai/openinference-core/setMetadata,setPromptTemplate,@arizeai/openinference-core/setPromptTemplate,setSession,@arizeai/openinference-core/setSession,setTags,@arizeai/openinference-core/setTags,setUser,@arizeai/openinference-core/setUser,TraceConfigOptions,@arizeai/openinference-core/TraceConfigOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-core/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-core/package.json" } ], "occurrences": [ { "location": "dist/esm/attributes/attribute-helpers.js", "line": 2 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 84 }, { "location": "dist/esm/attributes/attribute-helpers.js", "line": 186 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 2 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 13 }, { "location": "dist/esm/attributes/converse-request-attributes.js", "line": 85 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 2 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 14 }, { "location": "dist/esm/attributes/converse-response-attributes.js", "line": 109 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 12 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 76 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 77 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 146 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 179 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 211 }, { "location": "dist/esm/attributes/converse-streaming-response-attributes.js", "line": 250 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 2 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 21 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 65 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 87 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 107 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 111 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 205 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 208 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 279 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 281 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 324 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 554 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 594 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 616 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 622 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 637 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 653 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 677 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 689 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 693 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 715 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 718 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 731 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 761 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 762 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 780 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 840 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 910 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 934 }, { "location": "dist/esm/attributes/invoke-model-helpers.js", "line": 1027 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 11 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 176 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 183 }, { "location": "dist/esm/attributes/invoke-model-request-attributes.js", "line": 209 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 10 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 61 }, { "location": "dist/esm/attributes/invoke-model-response-attributes.js", "line": 126 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 13 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 21 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 22 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 29 }, { "location": "dist/esm/attributes/invoke-model-streaming-response-attributes.js", "line": 443 }, { "location": "dist/esm/instrumentation.js", "line": 4 }, { "location": "dist/esm/instrumentation.js", "line": 179 }, { "location": "dist/esm/instrumentation.js", "line": 185 }, { "location": "dist/esm/instrumentation.js", "line": 249 }, { "location": "dist/esm/instrumentation.js", "line": 260 }, { "location": "dist/esm/instrumentation.js", "line": 349 }, { "location": "dist/esm/instrumentation.js", "line": 355 }, { "location": "dist/esm/instrumentation.js", "line": 415 }, { "location": "dist/esm/instrumentation.js", "line": 425 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 2 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 84 }, { "location": "dist/esnext/attributes/attribute-helpers.js", "line": 186 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 2 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 13 }, { "location": "dist/esnext/attributes/converse-request-attributes.js", "line": 85 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 2 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 14 }, { "location": "dist/esnext/attributes/converse-response-attributes.js", "line": 109 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 19 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 85 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 86 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 152 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 175 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 207 }, { "location": "dist/esnext/attributes/converse-streaming-response-attributes.js", "line": 246 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 13 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 32 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 76 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 99 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 119 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 123 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 217 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 220 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 291 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 293 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 336 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 563 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 603 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 625 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 631 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 646 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 662 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 686 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 698 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 702 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 724 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 727 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 740 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 770 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 771 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 789 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 849 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 919 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 943 }, { "location": "dist/esnext/attributes/invoke-model-helpers.js", "line": 1036 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 11 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 177 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 184 }, { "location": "dist/esnext/attributes/invoke-model-request-attributes.js", "line": 210 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 10 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 61 }, { "location": "dist/esnext/attributes/invoke-model-response-attributes.js", "line": 126 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 20 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 28 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 29 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 36 }, { "location": "dist/esnext/attributes/invoke-model-streaming-response-attributes.js", "line": 467 }, { "location": "dist/esnext/instrumentation.js", "line": 4 }, { "location": "dist/esnext/instrumentation.js", "line": 182 }, { "location": "dist/esnext/instrumentation.js", "line": 188 }, { "location": "dist/esnext/instrumentation.js", "line": 252 }, { "location": "dist/esnext/instrumentation.js", "line": 263 }, { "location": "dist/esnext/instrumentation.js", "line": 352 }, { "location": "dist/esnext/instrumentation.js", "line": 358 }, { "location": "dist/esnext/instrumentation.js", "line": 418 }, { "location": "dist/esnext/instrumentation.js", "line": 428 }, { "location": "dist/src/attributes/attribute-helpers.js", "line": 14 }, { "location": "dist/src/attributes/converse-request-attributes.js", "line": 5 }, { "location": "dist/src/attributes/converse-response-attributes.js", "line": 5 }, { "location": "dist/src/attributes/converse-streaming-response-attributes.js", "line": 31 }, { "location": "dist/src/attributes/invoke-model-helpers.js", "line": 23 }, { "location": "dist/src/attributes/invoke-model-request-attributes.js", "line": 14 }, { "location": "dist/src/attributes/invoke-model-response-attributes.js", "line": 13 }, { "location": "dist/src/attributes/invoke-model-streaming-response-attributes.js", "line": 33 }, { "location": "dist/src/instrumentation.js", "line": 8 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 43 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 594 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 595 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 596 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 597 }, { "location": "scripts/validate-converse-comprehensive.ts", "line": 598 }, { "location": "scripts/validate-converse-stream.ts", "line": 43 }, { "location": "scripts/validate-converse-stream.ts", "line": 415 }, { "location": "scripts/validate-converse-stream.ts", "line": 416 }, { "location": "scripts/validate-converse-stream.ts", "line": 417 }, { "location": "scripts/validate-converse-stream.ts", "line": 418 }, { "location": "scripts/validate-converse-stream.ts", "line": 419 }, { "location": "scripts/validate-invoke-model.ts", "line": 37 }, { "location": "scripts/validate-invoke-model.ts", "line": 676 }, { "location": "scripts/validate-invoke-model.ts", "line": 677 }, { "location": "scripts/validate-invoke-model.ts", "line": 678 }, { "location": "scripts/validate-invoke-model.ts", "line": 679 }, { "location": "scripts/validate-invoke-model.ts", "line": 680 }, { "location": "src/attributes/attribute-helpers.ts", "line": 5 }, { "location": "src/attributes/attribute-helpers.ts", "line": 111 }, { "location": "src/attributes/attribute-helpers.ts", "line": 218 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 12 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 30 }, { "location": "src/attributes/converse-request-attributes.ts", "line": 134 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 10 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 24 }, { "location": "src/attributes/converse-response-attributes.ts", "line": 163 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 21 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 110 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 111 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 192 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 243 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 312 }, { "location": "src/attributes/converse-streaming-response-attributes.ts", "line": 355 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 8 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 52 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 104 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 125 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 149 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 153 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 259 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 262 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 352 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 353 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 401 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 675 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 721 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 743 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 747 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 762 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 778 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 804 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 819 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 824 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 850 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 853 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 867 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 903 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 904 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 923 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 990 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 1070 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 1104 }, { "location": "src/attributes/invoke-model-helpers.ts", "line": 1203 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 18 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 316 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 324 }, { "location": "src/attributes/invoke-model-request-attributes.ts", "line": 358 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 14 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 108 }, { "location": "src/attributes/invoke-model-response-attributes.ts", "line": 203 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 18 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 98 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 99 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 108 }, { "location": "src/attributes/invoke-model-streaming-response-attributes.ts", "line": 656 }, { "location": "src/instrumentation.ts", "line": 23 }, { "location": "src/instrumentation.ts", "line": 24 }, { "location": "src/instrumentation.ts", "line": 278 }, { "location": "src/instrumentation.ts", "line": 287 }, { "location": "src/instrumentation.ts", "line": 358 }, { "location": "src/instrumentation.ts", "line": 372 }, { "location": "src/instrumentation.ts", "line": 471 }, { "location": "src/instrumentation.ts", "line": 480 }, { "location": "src/instrumentation.ts", "line": 547 }, { "location": "src/instrumentation.ts", "line": 560 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@arizeai/openinference-instrumentation-bedrock@0.5.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-24T21:27:55Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'openinference-instrumentation-bedrock' with version '0.5.5'. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from 17 source files." } ] }