{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:277b8dbf-aacf-4fef-bed9-4b0b93999193", "version": 1, "metadata": { "timestamp": "2026-10-15T13:37:17Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "devframe", "group": "", "version": "0.9.20", "description": "Framework for building one portable devtool integration that runs in any viewer.", "purl": "pkg:npm/devframe@0.9.20", "bom-ref": "pkg:npm/devframe@0.9.20", "author": "Anthony Fu ", "properties": [ { "name": "cdx:npm:bin", "value": "devframe" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, watch, typecheck, prepack" }, { "name": "cdx:npm:buildScripts", "value": "build, watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@modelcontextprotocol\\n@standard-schema" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@modelcontextprotocol/client/package.json\\nnode_modules/@modelcontextprotocol/server/package.json\\nnode_modules/@standard-schema/spec/package.json\\nnode_modules/birpc/package.json\\nnode_modules/cac/package.json\\nnode_modules/crossws/package.json\\nnode_modules/get-port-please/package.json\\nnode_modules/h3/package.json\\nnode_modules/immer/package.json\\nnode_modules/launch-editor/package.json\\nnode_modules/mlly/package.json\\nnode_modules/mrmime/package.json\\nnode_modules/nostics/package.json\\nnode_modules/obug/package.json\\nnode_modules/ohash/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/pathe/package.json\\nnode_modules/perfect-debounce/package.json\\nnode_modules/structured-clone-es/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/typescript/package.json\\nnode_modules/ua-parser-modern/package.json\\nnode_modules/ufo/package.json\\nnode_modules/valibot/package.json\\nnode_modules/whenexpr/package.json\\nnode_modules/ws/package.json" } ] }, "components": [ { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "8.21.3", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@8.21.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" }, { "type": "vcs", "url": "git+https://github.com/websockets/ws.git" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.21.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "whenexpr", "version": "0.1.2", "description": "Tiny when-clause expression evaluator, inspired by VS Code's when clauses", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/whenexpr@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu/whenexpr#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu/whenexpr.git" } ], "type": "library", "bom-ref": "pkg:npm/whenexpr@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/whenexpr/package.json" }, { "name": "ImportedModules", "value": "whenexpr,WhenExpression,whenexpr/WhenExpression,evaluateWhen,whenexpr/evaluateWhen,resolveContextValue,whenexpr/resolveContextValue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/whenexpr/package.json" } ], "concludedValue": "node_modules/whenexpr/package.json" } ], "occurrences": [ { "location": "src/utils/when.ts", "line": 1 }, { "location": "src/utils/when.ts", "line": 2 }, { "location": "src/utils/when.ts", "line": 57 }, { "location": "src/utils/when.ts", "line": 68 }, { "location": "dist/utils/when.d.mts", "line": 1 } ] } }, { "authors": [ { "name": "Fabian Hiller" } ], "group": "", "name": "valibot", "version": "1.5.0", "description": "The modular and type safe schema library for validating structural data", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/valibot@1.5.0", "externalReferences": [ { "type": "website", "url": "https://valibot.dev" }, { "type": "vcs", "url": "https://github.com/open-circle/valibot" } ], "type": "library", "bom-ref": "pkg:npm/valibot@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/valibot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/valibot/package.json" } ], "concludedValue": "node_modules/valibot/package.json" } ] } }, { "group": "", "name": "ufo", "version": "1.6.4", "description": "URL utils for humans", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ufo@1.6.4", "type": "library", "bom-ref": "pkg:npm/ufo@1.6.4", "properties": [ { "name": "SrcFile", "value": "node_modules/ufo/package.json" }, { "name": "ImportedModules", "value": "ufo,cleanDoubleSlashes,ufo/cleanDoubleSlashes,withLeadingSlash,ufo/withLeadingSlash,withTrailingSlash,ufo/withTrailingSlash,withoutLeadingSlash,ufo/withoutLeadingSlash,joinURL,ufo/joinURL,withBase,ufo/withBase,withProtocol,ufo/withProtocol,withoutTrailingSlash,ufo/withoutTrailingSlash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ufo/package.json" } ], "concludedValue": "node_modules/ufo/package.json" } ], "occurrences": [ { "location": "dist/_shared-U8D-xzrp.mjs", "line": 4 }, { "location": "dist/_shared-U8D-xzrp.mjs", "line": 33 }, { "location": "dist/_shared-U8D-xzrp.mjs", "line": 108 }, { "location": "dist/_shared-U8D-xzrp.mjs", "line": 110 }, { "location": "dist/cli/main.mjs", "line": 6 }, { "location": "dist/cli/main.mjs", "line": 173 }, { "location": "dist/client/index.mjs", "line": 8 }, { "location": "dist/client/index.mjs", "line": 451 }, { "location": "dist/client/index.mjs", "line": 512 }, { "location": "dist/client/index.mjs", "line": 1538 }, { "location": "dist/client/index.mjs", "line": 1910 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 14 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 99 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 136 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 147 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 270 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 9 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 242 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 275 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 281 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 283 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 289 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 290 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 328 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 428 }, { "location": "src/adapters/_shared.ts", "line": 5 }, { "location": "src/adapters/_shared.ts", "line": 26 }, { "location": "src/adapters/_shared.ts", "line": 144 }, { "location": "src/adapters/_shared.ts", "line": 146 }, { "location": "src/adapters/dev.ts", "line": 10 }, { "location": "src/adapters/dev.ts", "line": 267 }, { "location": "src/adapters/initiate.ts", "line": 17 }, { "location": "src/adapters/initiate.ts", "line": 322 }, { "location": "src/adapters/initiate.ts", "line": 374 }, { "location": "src/adapters/initiate.ts", "line": 384 }, { "location": "src/cli/connect.ts", "line": 6 }, { "location": "src/cli/connect.ts", "line": 233 }, { "location": "src/client/connection.ts", "line": 7 }, { "location": "src/client/connection.ts", "line": 62 }, { "location": "src/client/connection.ts", "line": 163 }, { "location": "src/client/rpc-ws.ts", "line": 4 }, { "location": "src/client/rpc-ws.ts", "line": 87 }, { "location": "src/client/rpc.ts", "line": 13 }, { "location": "src/client/rpc.ts", "line": 369 }, { "location": "src/node/instance-shell.ts", "line": 19 }, { "location": "src/node/instance-shell.ts", "line": 476 }, { "location": "src/node/instance-shell.ts", "line": 513 }, { "location": "src/node/instance-shell.ts", "line": 525 }, { "location": "src/node/instance-shell.ts", "line": 527 }, { "location": "src/node/instance-shell.ts", "line": 547 }, { "location": "src/node/instance-shell.ts", "line": 550 }, { "location": "src/node/instance-shell.ts", "line": 596 }, { "location": "src/node/instance-shell.ts", "line": 708 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "ua-parser-modern", "version": "0.1.1", "description": "Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data. Supports browser & node.js environment", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ua-parser-modern@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/ua-parser-modern" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/ua-parser-modern.git" } ], "type": "library", "bom-ref": "pkg:npm/ua-parser-modern@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ua-parser-modern/package.json" }, { "name": "ImportedModules", "value": "ua-parser-modern,parseUA,ua-parser-modern/parseUA" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ua-parser-modern/package.json" } ], "concludedValue": "node_modules/ua-parser-modern/package.json" } ], "occurrences": [ { "location": "src/node/auth/state.ts", "line": 6 }, { "location": "src/node/auth/state.ts", "line": 19 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "6.0.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@6.0.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@6.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.23.0", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.23.0", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.23.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/tinyglobby/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "structured-clone-es", "version": "2.0.1", "description": "An env-agnostic serializer and deserializer with recursion ability and types beyond JSON, based on the HTML structured clone algorithm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/structured-clone-es@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/structured-clone-es#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/structured-clone-es.git" } ], "type": "library", "bom-ref": "pkg:npm/structured-clone-es@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/structured-clone-es/package.json" }, { "name": "ImportedModules", "value": "structured-clone-es,deserialize,structured-clone-es/deserialize,parse,structured-clone-es/parse,serialize,structured-clone-es/serialize,stringify,structured-clone-es/stringify" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/structured-clone-es/package.json" } ], "concludedValue": "node_modules/structured-clone-es/package.json" } ], "occurrences": [ { "location": "src/utils/structured-clone.ts", "line": 6 }, { "location": "src/utils/structured-clone.ts", "line": 13 }, { "location": "src/utils/structured-clone.ts", "line": 20 }, { "location": "src/utils/structured-clone.ts", "line": 28 }, { "location": "src/utils/structured-clone.ts", "line": 35 } ] }, "tags": [ "html" ] }, { "group": "", "name": "perfect-debounce", "version": "2.1.0", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/perfect-debounce@2.1.0", "type": "library", "bom-ref": "pkg:npm/perfect-debounce@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/perfect-debounce/package.json" }, { "name": "ImportedModules", "value": "perfect-debounce,debounce,perfect-debounce/debounce" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/perfect-debounce/package.json" } ], "concludedValue": "node_modules/perfect-debounce/package.json" } ], "occurrences": [ { "location": "src/node/storage.ts", "line": 5 }, { "location": "src/node/storage.ts", "line": 53 } ] } }, { "group": "", "name": "pathe", "version": "2.0.3", "description": "Universal filesystem path utils", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pathe@2.0.3", "type": "library", "bom-ref": "pkg:npm/pathe@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/pathe/package.json" }, { "name": "ImportedModules", "value": "pathe,resolve,pathe/resolve,join,pathe/join,dirname,pathe/dirname,extname,pathe/extname,isAbsolute,pathe/isAbsolute,normalize,pathe/normalize,pathe/sep" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pathe/package.json" } ], "concludedValue": "node_modules/pathe/package.json" } ], "occurrences": [ { "location": "dist/adapters/build.mjs", "line": 10 }, { "location": "dist/adapters/build.mjs", "line": 27 }, { "location": "dist/adapters/build.mjs", "line": 48 }, { "location": "dist/adapters/build.mjs", "line": 67 }, { "location": "dist/adapters/mcp.mjs", "line": 8 }, { "location": "dist/adapters/mcp.mjs", "line": 214 }, { "location": "dist/adapters/mcp.mjs", "line": 215 }, { "location": "dist/adapters/mcp.mjs", "line": 216 }, { "location": "dist/context-BLXXjoBW.mjs", "line": 12 }, { "location": "dist/context-BLXXjoBW.mjs", "line": 1186 }, { "location": "dist/context-jXO5vzjH.mjs", "line": 4 }, { "location": "dist/context-jXO5vzjH.mjs", "line": 10 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 11 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 102 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 1 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 19 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 20 }, { "location": "dist/host-h3-BROI6SQ4.mjs", "line": 21 }, { "location": "dist/instance-registry-DCq762YJ.mjs", "line": 3 }, { "location": "dist/instance-registry-DCq762YJ.mjs", "line": 25 }, { "location": "dist/instance-registry-DCq762YJ.mjs", "line": 48 }, { "location": "dist/instance-registry-DCq762YJ.mjs", "line": 51 }, { "location": "dist/instance-registry-DCq762YJ.mjs", "line": 90 }, { "location": "dist/instance-registry-DCq762YJ.mjs", "line": 162 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 4 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 391 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 427 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 436 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 452 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 454 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 455 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 469 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 494 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 512 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 515 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 604 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 616 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 665 }, { "location": "dist/services-install-Ben4yh52.mjs", "line": 2 }, { "location": "dist/services-install-Ben4yh52.mjs", "line": 13 }, { "location": "dist/services-install-Ben4yh52.mjs", "line": 24 }, { "location": "dist/services-install-Ben4yh52.mjs", "line": 25 }, { "location": "dist/storage-B70AXK64.mjs", "line": 2 }, { "location": "dist/storage-B70AXK64.mjs", "line": 122 }, { "location": "dist/utils/serve-static.mjs", "line": 3 }, { "location": "dist/utils/serve-static.mjs", "line": 26 }, { "location": "dist/utils/serve-static.mjs", "line": 52 }, { "location": "dist/utils/serve-static.mjs", "line": 64 }, { "location": "dist/utils/serve-static.mjs", "line": 74 }, { "location": "dist/utils/serve-static.mjs", "line": 84 }, { "location": "dist/utils/serve-static.mjs", "line": 159 }, { "location": "dist/utils/serve-static.mjs", "line": 199 }, { "location": "dist/write-DoXJzGUH.mjs", "line": 6 }, { "location": "dist/write-DoXJzGUH.mjs", "line": 85 }, { "location": "dist/write-DoXJzGUH.mjs", "line": 430 }, { "location": "dist/write-DoXJzGUH.mjs", "line": 432 }, { "location": "dist/write-DoXJzGUH.mjs", "line": 433 }, { "location": "dist/write-DoXJzGUH.mjs", "line": 437 }, { "location": "src/adapters/build.ts", "line": 10 }, { "location": "src/adapters/build.ts", "line": 63 }, { "location": "src/adapters/build.ts", "line": 98 }, { "location": "src/adapters/build.ts", "line": 124 }, { "location": "src/adapters/initiate.ts", "line": 16 }, { "location": "src/adapters/initiate.ts", "line": 326 }, { "location": "src/adapters/mcp/build-server.ts", "line": 10 }, { "location": "src/adapters/mcp/build-server.ts", "line": 130 }, { "location": "src/adapters/mcp/build-server.ts", "line": 132 }, { "location": "src/adapters/mcp/build-server.ts", "line": 133 }, { "location": "src/node/host-h3.ts", "line": 5 }, { "location": "src/node/host-h3.ts", "line": 54 }, { "location": "src/node/host-h3.ts", "line": 56 }, { "location": "src/node/host-h3.ts", "line": 57 }, { "location": "src/node/hub-internals/context.ts", "line": 4 }, { "location": "src/node/hub-internals/context.ts", "line": 80 }, { "location": "src/node/instance-registry.ts", "line": 4 }, { "location": "src/node/instance-registry.ts", "line": 65 }, { "location": "src/node/instance-registry.ts", "line": 93 }, { "location": "src/node/instance-registry.ts", "line": 101 }, { "location": "src/node/instance-registry.ts", "line": 139 }, { "location": "src/node/instance-registry.ts", "line": 253 }, { "location": "src/node/services-install.ts", "line": 3 }, { "location": "src/node/services-install.ts", "line": 18 }, { "location": "src/node/services-install.ts", "line": 30 }, { "location": "src/node/services-install.ts", "line": 32 }, { "location": "src/node/settings.ts", "line": 3 }, { "location": "src/node/settings.ts", "line": 27 }, { "location": "src/node/storage.ts", "line": 4 }, { "location": "src/node/storage.ts", "line": 55 }, { "location": "src/rpc/dump/write.ts", "line": 5 }, { "location": "src/rpc/dump/write.ts", "line": 28 }, { "location": "src/rpc/dump/write.ts", "line": 30 }, { "location": "src/rpc/dump/write.ts", "line": 31 }, { "location": "src/rpc/dump/write.ts", "line": 45 }, { "location": "src/utils/remote-assets.ts", "line": 14 }, { "location": "src/utils/remote-assets.ts", "line": 124 }, { "location": "src/utils/remote-assets.ts", "line": 173 }, { "location": "src/utils/remote-assets.ts", "line": 185 }, { "location": "src/utils/remote-assets.ts", "line": 204 }, { "location": "src/utils/remote-assets.ts", "line": 207 }, { "location": "src/utils/remote-assets.ts", "line": 209 }, { "location": "src/utils/remote-assets.ts", "line": 222 }, { "location": "src/utils/remote-assets.ts", "line": 251 }, { "location": "src/utils/remote-assets.ts", "line": 274 }, { "location": "src/utils/remote-assets.ts", "line": 277 }, { "location": "src/utils/remote-assets.ts", "line": 364 }, { "location": "src/utils/remote-assets.ts", "line": 379 }, { "location": "src/utils/remote-assets.ts", "line": 441 }, { "location": "src/utils/serve-static.ts", "line": 10 }, { "location": "src/utils/serve-static.ts", "line": 51 }, { "location": "src/utils/serve-static.ts", "line": 82 }, { "location": "src/utils/serve-static.ts", "line": 100 }, { "location": "src/utils/serve-static.ts", "line": 121 }, { "location": "src/utils/serve-static.ts", "line": 139 }, { "location": "src/utils/serve-static.ts", "line": 238 }, { "location": "src/utils/serve-static.ts", "line": 292 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "7.3.2", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@7.3.2", "type": "library", "bom-ref": "pkg:npm/p-limit@7.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "ImportedModules", "value": "p-limit" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ], "occurrences": [ { "location": "src/rpc/dump/collect.ts", "line": 11 }, { "location": "src/rpc/dump/collect.ts", "line": 54 } ] } }, { "group": "", "name": "ohash", "version": "2.0.12", "description": "Simple object hashing, serialization and comparison utils.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ohash@2.0.12", "type": "library", "bom-ref": "pkg:npm/ohash@2.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/ohash/package.json" }, { "name": "ImportedModules", "value": "ohash,hash,ohash/hash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ohash/package.json" } ], "concludedValue": "node_modules/ohash/package.json" } ], "occurrences": [ { "location": "src/utils/hash.ts", "line": 1 }, { "location": "src/utils/hash.ts", "line": 7 } ] }, "tags": [ "serialization" ] }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "obug", "version": "3.0.0", "description": "A lightweight JavaScript debugging utility, forked from debug, featuring TypeScript and ESM support.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/obug@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sxzz/obug#readme" }, { "type": "vcs", "url": "git+https://github.com/sxzz/obug.git" } ], "type": "library", "bom-ref": "pkg:npm/obug@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/obug/package.json" }, { "name": "ImportedModules", "value": "obug,createDebug,obug/createDebug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/obug/package.json" } ], "concludedValue": "node_modules/obug/package.json" } ], "occurrences": [ { "location": "src/node/host-functions.ts", "line": 5 }, { "location": "src/node/host-functions.ts", "line": 10 }, { "location": "src/node/host-services.ts", "line": 13 }, { "location": "src/node/host-services.ts", "line": 17 }, { "location": "src/node/rpc-shared-state.ts", "line": 4 }, { "location": "src/node/rpc-shared-state.ts", "line": 8 }, { "location": "src/node/rpc-shared-state.ts", "line": 9 }, { "location": "src/node/rpc-streaming.ts", "line": 10 }, { "location": "src/node/rpc-streaming.ts", "line": 14 }, { "location": "src/utils/remote-assets.ts", "line": 13 }, { "location": "src/utils/remote-assets.ts", "line": 17 }, { "location": "src/utils/remote-assets.ts", "line": 18 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "nostics", "version": "1.2.0", "description": "Structured diagnostic code library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nostics@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vercel-labs/nostics#readme" }, { "type": "vcs", "url": "git+https://github.com/vercel-labs/nostics.git" } ], "type": "library", "bom-ref": "pkg:npm/nostics@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nostics/package.json" }, { "name": "ExportedModules", "value": "nostics,nostics/formatters/ansi,createConsoleReporter,nostics/createConsoleReporter,defineProdDiagnostics,nostics/defineProdDiagnostics,Diagnostic,nostics/Diagnostic,formatDiagnostic,nostics/formatDiagnostic,AnyDiagnosticReporter,nostics/AnyDiagnosticReporter,ConsoleMethod,nostics/ConsoleMethod,ConsoleReporterOptions,nostics/ConsoleReporterOptions,DiagnosticCallParams,nostics/DiagnosticCallParams,DiagnosticDefinition,nostics/DiagnosticDefinition,DiagnosticHandle,nostics/DiagnosticHandle,DiagnosticInit,nostics/DiagnosticInit,DiagnosticReporter,nostics/DiagnosticReporter,Diagnostics,nostics/Diagnostics" }, { "name": "ImportedModules", "value": "nostics,Diagnostic,nostics/Diagnostic,createConsoleReporter,nostics/createConsoleReporter,defineDiagnostics,nostics/defineDiagnostics,defineProdDiagnostics,nostics/defineProdDiagnostics,formatDiagnostic,nostics/formatDiagnostic,nostics/formatters/ansi,ansiFormatter,nostics/formatters/ansi/ansiFormatter,AnyDiagnosticReporter,nostics/AnyDiagnosticReporter,DiagnosticDefinition,nostics/DiagnosticDefinition,Diagnostics,nostics/Diagnostics,ConsoleMethod,nostics/ConsoleMethod,ConsoleReporterOptions,nostics/ConsoleReporterOptions,DiagnosticCallParams,nostics/DiagnosticCallParams,DiagnosticHandle,nostics/DiagnosticHandle,DiagnosticInit,nostics/DiagnosticInit,DiagnosticReporter,nostics/DiagnosticReporter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nostics/package.json" } ], "concludedValue": "node_modules/nostics/package.json" } ], "occurrences": [ { "location": "dist/nostics-D0PvLZsn.mjs", "line": 1 }, { "location": "dist/nostics-D0PvLZsn.mjs", "line": 2 }, { "location": "dist/nostics-D0PvLZsn.mjs", "line": 53 }, { "location": "dist/nostics-DD6gsDZA.mjs", "line": 2 }, { "location": "dist/nostics-DD6gsDZA.mjs", "line": 3 }, { "location": "dist/nostics-DD6gsDZA.mjs", "line": 102 }, { "location": "src/utils/nostics.ts", "line": 1 }, { "location": "src/utils/nostics.ts", "line": 3 }, { "location": "src/utils/nostics.ts", "line": 4 }, { "location": "src/utils/nostics.ts", "line": 45 }, { "location": "src/utils/nostics.ts", "line": 56 }, { "location": "src/utils/nostics.ts", "line": 68 }, { "location": "src/utils/nostics.ts", "line": 70 }, { "location": "dist/nostics-0sKe5HIj.d.mts", "line": 1 }, { "location": "dist/nostics-0sKe5HIj.d.mts", "line": 2 }, { "location": "dist/nostics-D0PvLZsn.mjs", "line": 34 }, { "location": "dist/nostics-DD6gsDZA.mjs", "line": 83 }, { "location": "src/utils/nostics.ts", "line": 6 } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "mrmime", "version": "2.0.1", "description": "A tiny (2.8kB) and fast utility for getting a MIME type from an extension or filename", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mrmime@2.0.1", "type": "library", "bom-ref": "pkg:npm/mrmime@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mrmime/package.json" }, { "name": "ImportedModules", "value": "mrmime,lookup,mrmime/lookup" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mrmime/package.json" } ], "concludedValue": "node_modules/mrmime/package.json" } ], "occurrences": [ { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 10 }, { "location": "dist/remote-assets-D0StJVLp.mjs", "line": 395 }, { "location": "dist/utils/serve-static.mjs", "line": 6 }, { "location": "dist/utils/serve-static.mjs", "line": 90 }, { "location": "src/utils/remote-assets.ts", "line": 12 }, { "location": "src/utils/remote-assets.ts", "line": 133 }, { "location": "src/utils/serve-static.ts", "line": 9 }, { "location": "src/utils/serve-static.ts", "line": 148 } ] } }, { "group": "", "name": "mlly", "version": "1.8.2", "description": "Missing ECMAScript module utils for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mlly@1.8.2", "type": "library", "bom-ref": "pkg:npm/mlly@1.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/mlly/package.json" }, { "name": "ImportedModules", "value": "mlly,findDynamicImports,mlly/findDynamicImports,findExports,mlly/findExports,findStaticImports,mlly/findStaticImports" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mlly/package.json" } ], "concludedValue": "node_modules/mlly/package.json" } ], "occurrences": [ { "location": "scripts/check-client-dist.ts", "line": 3 }, { "location": "scripts/check-client-dist.ts", "line": 37 }, { "location": "scripts/check-client-dist.ts", "line": 39 }, { "location": "scripts/check-client-dist.ts", "line": 44 } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "", "name": "launch-editor", "version": "2.14.1", "description": "launch editor from node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/launch-editor@2.14.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitejs/launch-editor#readme" }, { "type": "vcs", "url": "git+https://github.com/vitejs/launch-editor.git" } ], "type": "library", "bom-ref": "pkg:npm/launch-editor@2.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/launch-editor/package.json" }, { "name": "ImportedModules", "value": "launch-editor" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/launch-editor/package.json" } ], "concludedValue": "node_modules/launch-editor/package.json" } ], "occurrences": [ { "location": "src/utils/launch-editor.ts", "line": 1 }, { "location": "src/utils/launch-editor.ts", "line": 13 } ] } }, { "authors": [ { "name": "Michel Weststrate " } ], "group": "", "name": "immer", "version": "11.1.18", "description": "Create your next immutable state by mutating the current one", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/immer@11.1.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/immerjs/immer#readme" }, { "type": "vcs", "url": "https://github.com/immerjs/immer.git" } ], "type": "library", "bom-ref": "pkg:npm/immer@11.1.18", "properties": [ { "name": "SrcFile", "value": "node_modules/immer/package.json" }, { "name": "ImportedModules", "value": "immer,Objectish,immer/Objectish,Patch,immer/Patch,applyPatches,immer/applyPatches,enablePatches,immer/enablePatches,produce,immer/produce,produceWithPatches,immer/produceWithPatches" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/immer/package.json" } ], "concludedValue": "node_modules/immer/package.json" } ], "occurrences": [ { "location": "src/utils/shared-state.ts", "line": 2 }, { "location": "src/utils/shared-state.ts", "line": 3 }, { "location": "src/utils/shared-state.ts", "line": 100 }, { "location": "src/utils/shared-state.ts", "line": 113 }, { "location": "src/utils/shared-state.ts", "line": 114 }, { "location": "src/utils/shared-state.ts", "line": 125 }, { "location": "src/utils/shared-state.ts", "line": 135 } ] } }, { "group": "", "name": "h3", "version": "2.0.1-rc.31", "description": "Minimal H(TTP) framework built for high performance and portability.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/h3@2.0.1-rc.31", "externalReferences": [ { "type": "website", "url": "https://h3.dev" } ], "type": "framework", "bom-ref": "pkg:npm/h3@2.0.1-rc.31", "properties": [ { "name": "SrcFile", "value": "node_modules/h3/package.json" }, { "name": "ImportedModules", "value": "h3,defineHandler,h3/defineHandler,getRequestIP,h3/getRequestIP,h3/H3,toNodeHandler,h3/toNodeHandler,h3/node,H3Event,h3/H3Event,EventHandler,h3/EventHandler" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/h3/package.json" } ], "concludedValue": "node_modules/h3/package.json" } ], "occurrences": [ { "location": "dist/adapters/mcp.mjs", "line": 11 }, { "location": "dist/adapters/mcp.mjs", "line": 581 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 15 }, { "location": "dist/dev-BdKKOH8S.mjs", "line": 186 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 10 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 70 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 508 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 574 }, { "location": "dist/instance-shell-yfrM3_vK.mjs", "line": 575 }, { "location": "dist/utils/serve-static.mjs", "line": 7 }, { "location": "dist/utils/serve-static.mjs", "line": 129 }, { "location": "dist/utils/serve-static.mjs", "line": 162 }, { "location": "src/adapters/cac.ts", "line": 10 }, { "location": "src/adapters/dev.ts", "line": 9 }, { "location": "src/adapters/dev.ts", "line": 159 }, { "location": "src/adapters/initiate.ts", "line": 15 }, { "location": "src/adapters/mcp/http.ts", "line": 2 }, { "location": "src/adapters/mcp/http.ts", "line": 4 }, { "location": "src/adapters/mcp/http.ts", "line": 40 }, { "location": "src/adapters/mcp/http.ts", "line": 41 }, { "location": "src/node/instance-shell.ts", "line": 5 }, { "location": "src/node/instance-shell.ts", "line": 18 }, { "location": "src/node/instance-shell.ts", "line": 97 }, { "location": "src/node/instance-shell.ts", "line": 804 }, { "location": "src/node/instance-shell.ts", "line": 904 }, { "location": "src/node/instance-shell.ts", "line": 905 }, { "location": "src/utils/serve-static.ts", "line": 1 }, { "location": "src/utils/serve-static.ts", "line": 8 }, { "location": "src/utils/serve-static.ts", "line": 203 }, { "location": "src/utils/serve-static.ts", "line": 243 }, { "location": "dist/adapters/cac.d.mts", "line": 3 }, { "location": "dist/adapters/dev.d.mts", "line": 7 }, { "location": "dist/adapters/initiate.d.mts", "line": 6 }, { "location": "dist/adapters/mcp.d.mts", "line": 2 }, { "location": "dist/instance-shell-C6Vg97lg.d.mts", "line": 6 }, { "location": "dist/utils/serve-static.d.mts", "line": 2 } ] }, "tags": [ "framework", "performance" ] }, { "group": "", "name": "get-port-please", "version": "3.2.0", "description": "Get an available TCP port to listen", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-port-please@3.2.0", "type": "library", "bom-ref": "pkg:npm/get-port-please@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-port-please/package.json" }, { "name": "ExportedModules", "value": "get-port-please,GetPortInput,get-port-please/GetPortInput,GetPortOptions,get-port-please/GetPortOptions" }, { "name": "ImportedModules", "value": "get-port-please,getPort,get-port-please/getPort" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-port-please/package.json" } ], "concludedValue": "node_modules/get-port-please/package.json" } ], "occurrences": [ { "location": "src/adapters/_shared.ts", "line": 4 }, { "location": "src/adapters/_shared.ts", "line": 57 }, { "location": "src/node/instance-shell.ts", "line": 720 }, { "location": "src/utils/get-port.ts", "line": 5 }, { "location": "src/utils/get-port.ts", "line": 6 } ] } }, { "group": "", "name": "crossws", "version": "0.4.12", "description": "Cross-platform WebSocket Servers for Node.js, Deno, Bun and Cloudflare Workers", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crossws@0.4.12", "externalReferences": [ { "type": "website", "url": "https://crossws.h3.dev" } ], "type": "library", "bom-ref": "pkg:npm/crossws@0.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/crossws/package.json" }, { "name": "ImportedModules", "value": "crossws/adapters/bun,crossws/adapters/deno,crossws/adapters/node,NodeAdapter,crossws/adapters/node/NodeAdapter,crossws,Hooks,crossws/Hooks,Peer,crossws/Peer" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crossws/package.json" } ], "concludedValue": "node_modules/crossws/package.json" } ], "occurrences": [ { "location": "dist/rpc/transports/ws-bun.mjs", "line": 12 }, { "location": "src/rpc/transports/ws-bun.ts", "line": 41 }, { "location": "dist/rpc/transports/ws-deno.mjs", "line": 12 }, { "location": "dist/rpc/transports/ws-server.mjs", "line": 8 }, { "location": "src/node/instance-shell.ts", "line": 2 }, { "location": "src/rpc/transports/ws-deno.ts", "line": 31 }, { "location": "src/rpc/transports/ws-server.ts", "line": 2 }, { "location": "src/rpc/transports/ws-server.ts", "line": 3 }, { "location": "src/rpc/transports/ws-server.ts", "line": 13 }, { "location": "dist/instance-shell-C6Vg97lg.d.mts", "line": 7 }, { "location": "dist/ws-server-BB8jhxeT.d.mts", "line": 4 }, { "location": "dist/ws-server-BB8jhxeT.d.mts", "line": 5 }, { "location": "dist/rpc/transports/ws-server.mjs", "line": 180 }, { "location": "src/rpc/transports/ws-server.ts", "line": 403 } ] } }, { "authors": [ { "name": "egoist <0x142857@gmail.com>" } ], "group": "", "name": "cac", "version": "7.0.0", "description": "Simple yet powerful framework for building command-line apps.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cac@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cacjs/cac#readme" }, { "type": "vcs", "url": "git+https://github.com/cacjs/cac.git" } ], "type": "framework", "bom-ref": "pkg:npm/cac@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cac/package.json" }, { "name": "ImportedModules", "value": "cac,cac/cac,cac/CAC" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cac/package.json" } ], "concludedValue": "node_modules/cac/package.json" } ], "occurrences": [ { "location": "dist/adapters/cac.mjs", "line": 6 }, { "location": "dist/adapters/cac.mjs", "line": 97 }, { "location": "dist/cli/main.mjs", "line": 7 }, { "location": "dist/cli/main.mjs", "line": 280 }, { "location": "src/adapters/cac.ts", "line": 9 }, { "location": "src/adapters/cac.ts", "line": 13 }, { "location": "src/adapters/cac.ts", "line": 70 }, { "location": "src/cli/main.ts", "line": 2 }, { "location": "src/cli/main.ts", "line": 11 }, { "location": "dist/adapters/cac.d.mts", "line": 2 }, { "location": "dist/context-BLHBDQcZ.d.mts", "line": 8 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "birpc", "version": "4.2.0", "description": "Message based Two-way remote procedure call", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/birpc@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu-collective/birpc#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu-collective/birpc.git" } ], "type": "library", "bom-ref": "pkg:npm/birpc@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/birpc/package.json" }, { "name": "ExportedModules", "value": "birpc,BirpcFn,birpc/BirpcFn,BirpcReturn,birpc/BirpcReturn" }, { "name": "ImportedModules", "value": "birpc,createBirpc,birpc/createBirpc,createBirpcGroup,birpc/createBirpcGroup,ChannelOptions,birpc/ChannelOptions,BirpcOptions,birpc/BirpcOptions,BirpcReturn,birpc/BirpcReturn,BirpcGroup,birpc/BirpcGroup,EventOptions,birpc/EventOptions,BirpcFn,birpc/BirpcFn" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/birpc/package.json" } ], "concludedValue": "node_modules/birpc/package.json" } ], "occurrences": [ { "location": "dist/client/index.mjs", "line": 9 }, { "location": "dist/client/index.mjs", "line": 945 }, { "location": "dist/in-page-channel/index.mjs", "line": 5 }, { "location": "dist/in-page-channel/index.mjs", "line": 248 }, { "location": "dist/rpc/client.mjs", "line": 1 }, { "location": "dist/rpc/client.mjs", "line": 5 }, { "location": "dist/rpc/server.mjs", "line": 1 }, { "location": "dist/rpc/server.mjs", "line": 4 }, { "location": "src/client/rpc-live.ts", "line": 1 }, { "location": "src/client/rpc.ts", "line": 1 }, { "location": "src/in-page-channel/internal.ts", "line": 2 }, { "location": "src/in-page-channel/internal.ts", "line": 6 }, { "location": "src/in-page-channel/internal.ts", "line": 299 }, { "location": "src/node/host-functions.ts", "line": 1 }, { "location": "src/node/instance-shell.ts", "line": 1 }, { "location": "src/node/rpc-core.ts", "line": 1 }, { "location": "src/rpc/client.ts", "line": 1 }, { "location": "src/rpc/client.ts", "line": 2 }, { "location": "src/rpc/client.ts", "line": 15 }, { "location": "src/rpc/server.ts", "line": 1 }, { "location": "src/rpc/server.ts", "line": 2 }, { "location": "src/rpc/server.ts", "line": 13 }, { "location": "src/rpc/transports/sse-client.ts", "line": 1 }, { "location": "src/rpc/transports/sse-server.ts", "line": 1 }, { "location": "src/rpc/transports/ws-client.ts", "line": 1 }, { "location": "src/rpc/transports/ws-server.ts", "line": 1 }, { "location": "src/rpc/types.ts", "line": 4 }, { "location": "dist/client/index.d.mts", "line": 6 }, { "location": "dist/context-BLHBDQcZ.d.mts", "line": 6 }, { "location": "dist/in-page-channel/index.d.mts", "line": 3 }, { "location": "dist/instance-shell-C6Vg97lg.d.mts", "line": 5 }, { "location": "dist/node/index.d.mts", "line": 4 }, { "location": "dist/rpc/client.d.mts", "line": 1 }, { "location": "dist/rpc/server.d.mts", "line": 1 }, { "location": "dist/rpc/transports/sse-server.d.mts", "line": 4 }, { "location": "dist/rpc-core-BlL-Ip8n.d.mts", "line": 5 }, { "location": "dist/sse-client-BcbYwXdD.d.mts", "line": 2 }, { "location": "dist/types-D2vGd7-2.d.mts", "line": 1 }, { "location": "dist/ws-client-CNpP6Ium.d.mts", "line": 2 }, { "location": "dist/ws-server-BB8jhxeT.d.mts", "line": 3 } ] } }, { "authors": [ { "name": "Colin McDonnell" } ], "group": "@standard-schema", "name": "spec", "version": "1.1.0", "description": "A family of specs for interoperable TypeScript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40standard-schema/spec@1.1.0", "externalReferences": [ { "type": "website", "url": "https://standardschema.dev" }, { "type": "vcs", "url": "https://github.com/standard-schema/standard-schema" } ], "type": "library", "bom-ref": "pkg:npm/@standard-schema/spec@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@standard-schema/spec/package.json" }, { "name": "ImportedModules", "value": "@standard-schema/spec,StandardSchemaV1,@standard-schema/spec/StandardSchemaV1,StandardJSONSchemaV1,@standard-schema/spec/StandardJSONSchemaV1" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@standard-schema/spec/package.json" } ], "concludedValue": "node_modules/@standard-schema/spec/package.json" } ], "occurrences": [ { "location": "src/adapters/flags.ts", "line": 1 }, { "location": "src/adapters/mcp/build-server.ts", "line": 2 }, { "location": "src/adapters/mcp/to-json-schema.ts", "line": 1 }, { "location": "src/in-page-channel/internal.ts", "line": 1 }, { "location": "src/rpc/types.ts", "line": 1 }, { "location": "src/rpc/utils.ts", "line": 1 }, { "location": "src/rpc/validate-io.ts", "line": 1 }, { "location": "src/utils/simple-schema.ts", "line": 1 }, { "location": "dist/context-BLHBDQcZ.d.mts", "line": 7 }, { "location": "dist/types-D2vGd7-2.d.mts", "line": 2 }, { "location": "dist/utils/simple-schema.d.mts", "line": 1 } ] } }, { "authors": [ { "name": "Anthropic" }, { "name": " PBC (https://anthropic.com)" } ], "group": "@modelcontextprotocol", "name": "server", "version": "2.0.0", "description": "Model Context Protocol implementation for TypeScript - Server package", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40modelcontextprotocol/server@2.0.0", "externalReferences": [ { "type": "website", "url": "https://modelcontextprotocol.io" }, { "type": "vcs", "url": "git+https://github.com/modelcontextprotocol/typescript-sdk.git" } ], "type": "library", "bom-ref": "pkg:npm/@modelcontextprotocol/server@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@modelcontextprotocol/server/package.json" }, { "name": "ImportedModules", "value": "@modelcontextprotocol/server,Server,@modelcontextprotocol/server/Server,createMcpHandler,@modelcontextprotocol/server/createMcpHandler,Tool,@modelcontextprotocol/server/Tool,@modelcontextprotocol/server/stdio" }, { "name": "cdx:mcp:package", "value": "true" }, { "name": "cdx:mcp:official", "value": "true" }, { "name": "cdx:mcp:role", "value": "server-sdk" }, { "name": "cdx:mcp:catalogSource", "value": "official-sdk" }, { "name": "cdx:mcp:packageName", "value": "@modelcontextprotocol/server" }, { "name": "cdx:license:category", "value": "Permissive" } ], "tags": [ "mcp", "mcp-sdk", "mcp-server", "official-mcp-sdk", "trusted-source" ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@modelcontextprotocol/server/package.json" } ], "concludedValue": "node_modules/@modelcontextprotocol/server/package.json" } ], "occurrences": [ { "location": "dist/adapters/mcp.mjs", "line": 12 }, { "location": "dist/adapters/mcp.mjs", "line": 532 }, { "location": "dist/cli/main.mjs", "line": 106 }, { "location": "src/adapters/mcp/build-server.ts", "line": 1 }, { "location": "src/adapters/mcp/build-server.ts", "line": 7 }, { "location": "src/adapters/mcp/fetch.ts", "line": 2 }, { "location": "src/adapters/mcp/fetch.ts", "line": 129 }, { "location": "src/cli/connect.ts", "line": 1 }, { "location": "src/cli/connect.ts", "line": 166 }, { "location": "dist/adapters/mcp.d.mts", "line": 3 }, { "location": "dist/adapters/mcp.mjs", "line": 231 }, { "location": "dist/cli/main.mjs", "line": 107 }, { "location": "src/adapters/mcp/build-server.ts", "line": 162 }, { "location": "src/cli/connect.ts", "line": 167 } ] } }, { "authors": [ { "name": "Anthropic" }, { "name": " PBC (https://anthropic.com)" } ], "group": "@modelcontextprotocol", "name": "client", "version": "2.0.0", "description": "Model Context Protocol implementation for TypeScript - Client package", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40modelcontextprotocol/client@2.0.0", "externalReferences": [ { "type": "website", "url": "https://modelcontextprotocol.io" }, { "type": "vcs", "url": "git+https://github.com/modelcontextprotocol/typescript-sdk.git" } ], "type": "library", "bom-ref": "pkg:npm/@modelcontextprotocol/client@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@modelcontextprotocol/client/package.json" }, { "name": "ExportedModules", "value": "client/rpc-services,client/rpc-sse,client/rpc-ws,client-assets,DevframeServiceClientHandle,rpc-services/DevframeServiceClientHandle,DevframeServicesClient,rpc-services/DevframeServicesClient,resolveWsUrl,rpc-ws/resolveWsUrl,WsUrlLocation,rpc-ws/WsUrlLocation" }, { "name": "ImportedModules", "value": "@modelcontextprotocol/client" }, { "name": "cdx:mcp:package", "value": "true" }, { "name": "cdx:mcp:official", "value": "true" }, { "name": "cdx:mcp:role", "value": "client-sdk" }, { "name": "cdx:mcp:catalogSource", "value": "official-sdk" }, { "name": "cdx:mcp:packageName", "value": "@modelcontextprotocol/client" }, { "name": "cdx:license:category", "value": "Permissive" } ], "tags": [ "mcp", "mcp-client", "mcp-sdk", "official-mcp-sdk", "trusted-source" ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@modelcontextprotocol/client/package.json" } ], "concludedValue": "node_modules/@modelcontextprotocol/client/package.json" } ], "occurrences": [ { "location": "dist/cli/main.mjs", "line": 108 }, { "location": "src/cli/connect.ts", "line": 168 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/devframe@0.9.20" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-15T13:37:17Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'devframe' with version '0.9.20'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 27 source files." } ] }