{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:8527b391-dedd-4111-92b2-fac7ec8c1791", "version": 1, "metadata": { "timestamp": "2026-10-17T17:45:39Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "plugin-git", "group": "@devframes", "version": "1.2.5", "description": "Devframe plugin that shows a Git dashboard for status, log, branches, and diffs.", "purl": "pkg:npm/%40devframes/plugin-git@1.2.5", "bom-ref": "pkg:npm/@devframes/plugin-git@1.2.5", "author": "Anthony Fu ", "properties": [ { "name": "cdx:npm:bin", "value": "devframe-git" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, build:spa, cli:build, dev, dev:server, dev:client, play, storybook, storybook:build, watch, typecheck, prepack, test" }, { "name": "cdx:npm:buildScripts", "value": "build, build:spa, cli:build, storybook:build, watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@antfu\\n@devframes\\n@floating-ui\\n@iconify-json\\n@radix-ui\\n@storybook\\n@types\\n@unocss\\n@vitejs" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@antfu/design/package.json\\nnode_modules/@devframes/plugin-git--assets/package.json\\nnode_modules/@devframes/service-git/package.json\\nnode_modules/@devframes/service-shiki/package.json\\nnode_modules/@floating-ui/react/package.json\\nnode_modules/@iconify-json/catppuccin/package.json\\nnode_modules/@radix-ui/react-scroll-area/package.json\\nnode_modules/@radix-ui/react-slot/package.json\\nnode_modules/@storybook/addon-a11y/package.json\\nnode_modules/@storybook/addon-docs/package.json\\nnode_modules/@storybook/react-vite/package.json\\nnode_modules/@types/react-dom/package.json\\nnode_modules/@types/react/package.json\\nnode_modules/@unocss/postcss/package.json\\nnode_modules/@vitejs/plugin-react-oxc/package.json\\nnode_modules/cac/package.json\\nnode_modules/clsx/package.json\\nnode_modules/colorjs.io/package.json\\nnode_modules/devframe/package.json\\nnode_modules/diff/package.json\\nnode_modules/h3/package.json\\nnode_modules/next/package.json\\nnode_modules/pathe/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react/package.json\\nnode_modules/storybook/package.json\\nnode_modules/tailwind-merge/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/unocss/package.json\\nnode_modules/vitest/package.json\\nnode_modules/ws/package.json" } ] }, "components": [ { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "8.22.0", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@8.22.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" }, { "type": "vcs", "url": "git+https://github.com/websockets/ws.git" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "5.0.3", "description": "Next generation testing framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@5.0.3", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@5.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "unocss", "version": "66.10.5", "description": "The instant on-demand Atomic CSS engine.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unocss@66.10.5", "externalReferences": [ { "type": "website", "url": "https://unocss.dev" }, { "type": "vcs", "url": "git+https://github.com/unocss/unocss.git" } ], "type": "library", "bom-ref": "pkg:npm/unocss@66.10.5", "properties": [ { "name": "SrcFile", "value": "node_modules/unocss/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unocss/package.json" } ], "concludedValue": "node_modules/unocss/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.23.0", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.23.0", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.23.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Dany Castillo" } ], "group": "", "name": "tailwind-merge", "version": "3.7.0", "description": "Merge Tailwind CSS classes without style conflicts", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tailwind-merge@3.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dcastil/tailwind-merge" }, { "type": "vcs", "url": "https://github.com/dcastil/tailwind-merge.git" } ], "type": "library", "bom-ref": "pkg:npm/tailwind-merge@3.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tailwind-merge/package.json" }, { "name": "ImportedModules", "value": "tailwind-merge,twMerge,tailwind-merge/twMerge" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tailwind-merge/package.json" } ], "concludedValue": "node_modules/tailwind-merge/package.json" } ], "occurrences": [ { "location": "app/lib/utils.ts", "line": 3 }, { "location": "app/lib/utils.ts", "line": 6 } ] } }, { "group": "", "name": "storybook", "version": "10.6.1", "description": "Storybook: Develop, document, and test UI components in isolation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/storybook@10.6.1", "externalReferences": [ { "type": "website", "url": "https://storybook.js.org" }, { "type": "vcs", "url": "https://github.com/storybookjs/storybook.git" } ], "type": "library", "bom-ref": "pkg:npm/storybook@10.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/storybook/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/storybook/package.json" } ], "concludedValue": "node_modules/storybook/package.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "react-dom", "version": "19.3.0", "description": "React package for working with the DOM.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-dom@19.3.0", "externalReferences": [ { "type": "website", "url": "https://react.dev/" }, { "type": "vcs", "url": "https://github.com/react/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-dom@19.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-dom/package.json" } ], "concludedValue": "node_modules/react-dom/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react", "version": "19.3.0", "description": "React is a JavaScript library for building user interfaces.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react@19.3.0", "externalReferences": [ { "type": "website", "url": "https://react.dev/" }, { "type": "vcs", "url": "https://github.com/react/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@19.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "ImportedModules", "value": "react,useEffect,react/useEffect,useState,react/useState,Dispatch,react/Dispatch,SetStateAction,react/SetStateAction,useCallback,react/useCallback,ReactNode,react/ReactNode,PointerEvent,react/PointerEvent,useRef,react/useRef,CSSProperties,react/CSSProperties,useMemo,react/useMemo,createContext,react/createContext,react/use,memo,react/memo" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ], "occurrences": [ { "location": "app/components/diff/use-diff-tokens.ts", "line": 6 }, { "location": "app/components/diff/use-diff-tokens.ts", "line": 36 }, { "location": "app/components/diff/use-diff-tokens.ts", "line": 38 }, { "location": "app/components/theme.ts", "line": 3 }, { "location": "app/components/theme.ts", "line": 30 }, { "location": "app/components/theme.ts", "line": 32 }, { "location": "app/components/theme.ts", "line": 34 }, { "location": "app/components/theme.ts", "line": 38 }, { "location": "app/components/use-rpc-resource.ts", "line": 4 }, { "location": "app/components/use-rpc-resource.ts", "line": 5 }, { "location": "app/components/use-rpc-resource.ts", "line": 24 }, { "location": "app/components/use-rpc-resource.ts", "line": 25 }, { "location": "app/components/use-rpc-resource.ts", "line": 26 }, { "location": "app/components/use-rpc-resource.ts", "line": 28 }, { "location": "app/components/use-rpc-resource.ts", "line": 44 }, { "location": "app/app/layout.tsx", "line": 2 }, { "location": "app/components/commit-details-panel.tsx", "line": 5 }, { "location": "app/components/commit-details-panel.tsx", "line": 15 }, { "location": "app/components/dashboard.tsx", "line": 5 }, { "location": "app/components/dashboard.tsx", "line": 6 }, { "location": "app/components/dashboard.tsx", "line": 41 }, { "location": "app/components/dashboard.tsx", "line": 42 }, { "location": "app/components/dashboard.tsx", "line": 45 }, { "location": "app/components/dashboard.tsx", "line": 54 }, { "location": "app/components/dashboard.tsx", "line": 151 }, { "location": "app/components/dashboard.tsx", "line": 152 }, { "location": "app/components/dashboard.tsx", "line": 153 }, { "location": "app/components/dashboard.tsx", "line": 157 }, { "location": "app/components/dashboard.tsx", "line": 163 }, { "location": "app/components/diff/diff-file.tsx", "line": 3 }, { "location": "app/components/diff/diff-view.tsx", "line": 5 }, { "location": "app/components/diff/diff-view.tsx", "line": 57 }, { "location": "app/components/diff/diff-view.tsx", "line": 58 }, { "location": "app/components/diff/diff-view.tsx", "line": 92 }, { "location": "app/components/diff/diff-view.tsx", "line": 119 }, { "location": "app/components/log-panel.tsx", "line": 5 }, { "location": "app/components/log-panel.tsx", "line": 21 }, { "location": "app/components/log-panel.tsx", "line": 22 }, { "location": "app/components/log-panel.tsx", "line": 23 }, { "location": "app/components/log-panel.tsx", "line": 24 }, { "location": "app/components/log-panel.tsx", "line": 25 }, { "location": "app/components/log-panel.tsx", "line": 26 }, { "location": "app/components/log-panel.tsx", "line": 27 }, { "location": "app/components/log-panel.tsx", "line": 28 }, { "location": "app/components/log-panel.tsx", "line": 29 }, { "location": "app/components/log-panel.tsx", "line": 31 }, { "location": "app/components/log-panel.tsx", "line": 35 }, { "location": "app/components/log-panel.tsx", "line": 79 }, { "location": "app/components/log-panel.tsx", "line": 93 }, { "location": "app/components/log-panel.tsx", "line": 100 }, { "location": "app/components/log-panel.tsx", "line": 106 }, { "location": "app/components/log-panel.tsx", "line": 115 }, { "location": "app/components/rpc-provider.tsx", "line": 5 }, { "location": "app/components/rpc-provider.tsx", "line": 8 }, { "location": "app/components/rpc-provider.tsx", "line": 16 }, { "location": "app/components/rpc-provider.tsx", "line": 19 }, { "location": "app/components/rpc-provider.tsx", "line": 23 }, { "location": "app/components/rpc-provider.tsx", "line": 25 }, { "location": "app/components/status-panel.tsx", "line": 4 }, { "location": "app/components/status-panel.tsx", "line": 11 }, { "location": "app/components/status-panel.tsx", "line": 33 }, { "location": "app/components/status-panel.tsx", "line": 35 }, { "location": "app/components/status-panel.tsx", "line": 36 }, { "location": "app/components/status-panel.tsx", "line": 37 }, { "location": "app/components/status-panel.tsx", "line": 38 }, { "location": "app/components/status-panel.tsx", "line": 42 }, { "location": "app/components/status-panel.tsx", "line": 55 }, { "location": "app/components/status-panel.tsx", "line": 68 }, { "location": "app/components/status-panel.tsx", "line": 86 }, { "location": "app/components/ui/avatar.tsx", "line": 3 }, { "location": "app/components/ui/avatar.tsx", "line": 4 }, { "location": "app/components/ui/avatar.tsx", "line": 82 }, { "location": "app/components/ui/avatar.tsx", "line": 83 }, { "location": "app/components/ui/avatar.tsx", "line": 85 }, { "location": "app/components/ui/badge.tsx", "line": 3 }, { "location": "app/components/ui/button.tsx", "line": 8 }, { "location": "app/components/ui/file-icon.tsx", "line": 1 }, { "location": "app/components/ui/icon.tsx", "line": 1 }, { "location": "app/components/ui/scroll-area.tsx", "line": 4 }, { "location": "app/components/ui/skeleton.tsx", "line": 1 }, { "location": "app/components/ui/textarea.tsx", "line": 1 }, { "location": "app/components/views/log-panel-view.tsx", "line": 20 }, { "location": "app/components/views/log-panel-view.tsx", "line": 262 }, { "location": "app/components/views/log-panel-view.tsx", "line": 273 }, { "location": "app/components/views/log-panel-view.tsx", "line": 276 }, { "location": "app/components/views/log-panel-view.tsx", "line": 277 }, { "location": "app/components/views/log-panel-view.tsx", "line": 296 }, { "location": "app/components/views/log-panel-view.tsx", "line": 421 }, { "location": "app/components/views/log-panel-view.tsx", "line": 435 }, { "location": "app/components/views/log-panel-view.tsx", "line": 436 }, { "location": "app/components/views/log-panel-view.tsx", "line": 437 }, { "location": "app/components/views/log-panel-view.tsx", "line": 438 }, { "location": "app/components/views/log-panel-view.tsx", "line": 441 }, { "location": "app/components/views/log-panel-view.tsx", "line": 446 }, { "location": "app/components/views/status-panel-view.stories.tsx", "line": 3 }, { "location": "app/components/views/status-panel-view.stories.tsx", "line": 40 }, { "location": "app/components/views/status-panel-view.tsx", "line": 4 } ] }, "tags": [ "framework" ] }, { "group": "", "name": "pathe", "version": "2.0.3", "description": "Universal filesystem path utils", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pathe@2.0.3", "type": "library", "bom-ref": "pkg:npm/pathe@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/pathe/package.json" }, { "name": "ImportedModules", "value": "pathe,resolve,pathe/resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pathe/package.json" } ], "concludedValue": "node_modules/pathe/package.json" } ], "occurrences": [ { "location": "dist/node-C-1Pmpxc.mjs", "line": 3 }, { "location": "dist/node-C-1Pmpxc.mjs", "line": 28 }, { "location": "playgrounds/server.mjs", "line": 18 }, { "location": "playgrounds/server.mjs", "line": 22 }, { "location": "playgrounds/server.mjs", "line": 23 }, { "location": "playgrounds/server.mjs", "line": 29 }, { "location": "src/node/index.ts", "line": 7 }, { "location": "src/node/index.ts", "line": 58 } ] } }, { "group": "", "name": "next", "version": "16.3.8", "description": "The React Framework", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/next@16.3.8", "externalReferences": [ { "type": "website", "url": "https://nextjs.org" } ], "type": "framework", "bom-ref": "pkg:npm/next@16.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/next/package.json" }, { "name": "ImportedModules", "value": "next/constants.js,PHASE_DEVELOPMENT_SERVER,next/constants.js/PHASE_DEVELOPMENT_SERVER,next,Metadata,next/Metadata" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/next/package.json" } ], "concludedValue": "node_modules/next/package.json" } ], "occurrences": [ { "location": "app/next.config.mjs", "line": 1 }, { "location": "app/app/layout.tsx", "line": 1 } ] }, "tags": [ "framework" ] }, { "group": "", "name": "h3", "version": "2.0.1", "description": "Minimal H(TTP) framework built for high performance and portability.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/h3@2.0.1", "externalReferences": [ { "type": "website", "url": "https://h3.dev" } ], "type": "framework", "bom-ref": "pkg:npm/h3@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/h3/package.json" }, { "name": "ImportedModules", "value": "h3,h3/H3,toNodeHandler,h3/toNodeHandler" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/h3/package.json" } ], "concludedValue": "node_modules/h3/package.json" } ], "occurrences": [ { "location": "playgrounds/server.mjs", "line": 17 }, { "location": "playgrounds/server.mjs", "line": 39 } ] }, "tags": [ "framework", "performance" ] }, { "group": "", "name": "diff", "version": "9.0.0", "description": "A JavaScript text diff implementation.", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "ImportedModules", "value": "diff,diffWords,diff/diffWords,StructuredPatchHunk,diff/StructuredPatchHunk,parsePatch,diff/parsePatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ], "occurrences": [ { "location": "app/components/diff/build-model.ts", "line": 2 }, { "location": "app/components/diff/build-model.ts", "line": 36 }, { "location": "app/components/diff/parse-patch.ts", "line": 1 }, { "location": "app/components/diff/parse-patch.ts", "line": 2 }, { "location": "app/components/diff/parse-patch.ts", "line": 157 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "devframe", "version": "1.2.5", "description": "Framework for building one portable devtool integration that runs in any viewer.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/devframe@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ], "type": "framework", "bom-ref": "pkg:npm/devframe@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/devframe/package.json" }, { "name": "ImportedModules", "value": "devframe/adapters/cac,createCac,devframe/adapters/cac/createCac,devframe,defineDevframe,devframe/defineDevframe,devframe/initiate,initDevframe,devframe/initiate/initDevframe,devframe/utils/get-port,getPort,devframe/utils/get-port/getPort,devframe/client,DevframeRpcClient,devframe/client/DevframeRpcClient,DevframeDefinition,devframe/DevframeDefinition,RemoteAssets,devframe/RemoteAssets,DevframeConnectionStatus,devframe/client/DevframeConnectionStatus,ConnectionMeta,devframe/ConnectionMeta,connectDevframe,devframe/client/connectDevframe,devframe/constants,DEVFRAME_WS_ROUTE,devframe/constants/DEVFRAME_WS_ROUTE" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/devframe/package.json" } ], "concludedValue": "node_modules/devframe/package.json" } ], "occurrences": [ { "location": "dist/node/cli.mjs", "line": 3 }, { "location": "dist/node/cli.mjs", "line": 5 }, { "location": "src/node/cli.ts", "line": 2 }, { "location": "src/node/cli.ts", "line": 5 }, { "location": "dist/node-C-1Pmpxc.mjs", "line": 2 }, { "location": "dist/node-C-1Pmpxc.mjs", "line": 29 }, { "location": "playgrounds/server.mjs", "line": 15 }, { "location": "playgrounds/server.mjs", "line": 16 }, { "location": "app/components/use-rpc-resource.ts", "line": 3 }, { "location": "src/node/index.ts", "line": 4 }, { "location": "src/node/index.ts", "line": 6 }, { "location": "src/node/index.ts", "line": 60 }, { "location": "app/components/commit-details-panel.tsx", "line": 4 }, { "location": "app/components/connection-state.tsx", "line": 3 }, { "location": "app/components/dashboard.tsx", "line": 4 }, { "location": "app/components/log-panel.tsx", "line": 4 }, { "location": "app/components/rpc-provider.tsx", "line": 3 }, { "location": "app/components/rpc-provider.tsx", "line": 4 }, { "location": "app/components/rpc-provider.tsx", "line": 6 }, { "location": "app/components/rpc-provider.tsx", "line": 7 }, { "location": "app/components/status-panel.tsx", "line": 3 }, { "location": "dist/node/index.d.mts", "line": 1 }, { "location": "playgrounds/server.mjs", "line": 40 }, { "location": "playgrounds/server.mjs", "line": 35 }, { "location": "app/components/rpc-provider.tsx", "line": 42 } ] }, "tags": [ "framework" ] }, { "group": "", "name": "colorjs.io", "version": "0.7.1", "description": "Let’s get serious about color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/colorjs.io@0.7.1", "externalReferences": [ { "type": "website", "url": "https://colorjs.io" }, { "type": "vcs", "url": "git+https://github.com/color-js/color.js.git" } ], "type": "library", "bom-ref": "pkg:npm/colorjs.io@0.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/colorjs.io/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colorjs.io/package.json" } ], "concludedValue": "node_modules/colorjs.io/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "clsx", "version": "2.1.1", "description": "A tiny (239B) utility for constructing className strings conditionally.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clsx@2.1.1", "type": "library", "bom-ref": "pkg:npm/clsx@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/clsx/package.json" }, { "name": "ImportedModules", "value": "clsx,ClassValue,clsx/ClassValue,clsx/clsx" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clsx/package.json" } ], "concludedValue": "node_modules/clsx/package.json" } ], "occurrences": [ { "location": "app/lib/utils.ts", "line": 1 }, { "location": "app/lib/utils.ts", "line": 2 }, { "location": "app/lib/utils.ts", "line": 6 } ] } }, { "authors": [ { "name": "egoist <0x142857@gmail.com>" } ], "group": "", "name": "cac", "version": "7.0.0", "description": "Simple yet powerful framework for building command-line apps.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cac@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cacjs/cac#readme" }, { "type": "vcs", "url": "git+https://github.com/cacjs/cac.git" } ], "type": "framework", "bom-ref": "pkg:npm/cac@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cac/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cac/package.json" } ], "concludedValue": "node_modules/cac/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Evan You" } ], "group": "@vitejs", "name": "plugin-react-oxc", "version": "0.4.3", "description": "The future default Vite plugin for React projects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitejs/plugin-react-oxc@0.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme" }, { "type": "vcs", "url": "git+https://github.com/vitejs/vite-plugin-react.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitejs/plugin-react-oxc@0.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitejs/plugin-react-oxc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitejs/plugin-react-oxc/package.json" } ], "concludedValue": "node_modules/@vitejs/plugin-react-oxc/package.json" } ] } }, { "authors": [ { "name": "sibbng " } ], "group": "@unocss", "name": "postcss", "version": "66.10.5", "description": "PostCSS plugin for UnoCSS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40unocss/postcss@66.10.5", "externalReferences": [ { "type": "website", "url": "https://unocss.dev" }, { "type": "vcs", "url": "git+https://github.com/unocss/unocss.git" } ], "type": "library", "bom-ref": "pkg:npm/@unocss/postcss@66.10.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@unocss/postcss/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@unocss/postcss/package.json" } ], "concludedValue": "node_modules/@unocss/postcss/package.json" } ] } }, { "group": "@types", "name": "react-dom", "version": "19.3.0", "description": "TypeScript definitions for react-dom", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/react-dom@19.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react-dom" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/react-dom@19.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/react-dom/package.json" } ], "concludedValue": "node_modules/@types/react-dom/package.json" } ] } }, { "group": "@types", "name": "react", "version": "19.3.0", "description": "TypeScript definitions for react", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/react@19.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/react@19.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/react/package.json" } ], "concludedValue": "node_modules/@types/react/package.json" } ] } }, { "group": "@storybook", "name": "react-vite", "version": "10.6.1", "description": "Storybook for React and Vite: Develop, document, and test UI components in isolation", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40storybook/react-vite@10.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/storybookjs/storybook/tree/next/code/frameworks/react-vite" }, { "type": "vcs", "url": "https://github.com/storybookjs/storybook.git" } ], "type": "library", "bom-ref": "pkg:npm/@storybook/react-vite@10.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@storybook/react-vite/package.json" }, { "name": "ImportedModules", "value": "@storybook/react-vite,Meta,@storybook/react-vite/Meta,StoryObj,@storybook/react-vite/StoryObj" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@storybook/react-vite/package.json" } ], "concludedValue": "node_modules/@storybook/react-vite/package.json" } ], "occurrences": [ { "location": "app/components/views/commit-details-view.stories.tsx", "line": 2 }, { "location": "app/components/views/log-panel-view.stories.tsx", "line": 2 }, { "location": "app/components/views/status-panel-view.stories.tsx", "line": 2 } ] }, "tags": [ "test" ] }, { "group": "@storybook", "name": "addon-docs", "version": "10.6.1", "description": "Storybook Docs: Document UI components automatically with stories and MDX", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40storybook/addon-docs@10.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/storybookjs/storybook/tree/next/code/addons/docs" }, { "type": "vcs", "url": "https://github.com/storybookjs/storybook.git" } ], "type": "library", "bom-ref": "pkg:npm/@storybook/addon-docs@10.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@storybook/addon-docs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@storybook/addon-docs/package.json" } ], "concludedValue": "node_modules/@storybook/addon-docs/package.json" } ] } }, { "group": "@storybook", "name": "addon-a11y", "version": "10.6.1", "description": "Storybook Addon A11y: Test UI component compliance with WCAG web accessibility standards", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40storybook/addon-a11y@10.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/storybookjs/storybook/tree/next/code/addons/a11y" }, { "type": "vcs", "url": "https://github.com/storybookjs/storybook.git" } ], "type": "library", "bom-ref": "pkg:npm/@storybook/addon-a11y@10.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@storybook/addon-a11y/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@storybook/addon-a11y/package.json" } ], "concludedValue": "node_modules/@storybook/addon-a11y/package.json" } ] }, "tags": [ "test", "web" ] }, { "group": "@radix-ui", "name": "react-slot", "version": "1.4.0", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40radix-ui/react-slot@1.4.0", "externalReferences": [ { "type": "website", "url": "https://radix-ui.com/primitives" }, { "type": "vcs", "url": "git+https://github.com/radix-ui/primitives.git" } ], "type": "library", "bom-ref": "pkg:npm/@radix-ui/react-slot@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@radix-ui/react-slot/package.json" }, { "name": "ImportedModules", "value": "@radix-ui/react-slot,Slot,@radix-ui/react-slot/Slot" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@radix-ui/react-slot/package.json" } ], "concludedValue": "node_modules/@radix-ui/react-slot/package.json" } ], "occurrences": [ { "location": "app/components/ui/badge.tsx", "line": 2 }, { "location": "app/components/ui/button.tsx", "line": 7 } ] } }, { "group": "@radix-ui", "name": "react-scroll-area", "version": "1.3.0", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40radix-ui/react-scroll-area@1.3.0", "externalReferences": [ { "type": "website", "url": "https://radix-ui.com/primitives" }, { "type": "vcs", "url": "git+https://github.com/radix-ui/primitives.git" } ], "type": "library", "bom-ref": "pkg:npm/@radix-ui/react-scroll-area@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@radix-ui/react-scroll-area/package.json" }, { "name": "ImportedModules", "value": "@radix-ui/react-scroll-area" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@radix-ui/react-scroll-area/package.json" } ], "concludedValue": "node_modules/@radix-ui/react-scroll-area/package.json" } ], "occurrences": [ { "location": "app/components/ui/scroll-area.tsx", "line": 3 } ] } }, { "group": "@iconify-json", "name": "catppuccin", "version": "1.2.17", "description": "Catppuccin Icons icon set in Iconify JSON format", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40iconify-json/catppuccin@1.2.17", "externalReferences": [ { "type": "website", "url": "https://icon-sets.iconify.design/catppuccin/" } ], "type": "library", "bom-ref": "pkg:npm/@iconify-json/catppuccin@1.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/@iconify-json/catppuccin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@iconify-json/catppuccin/package.json" } ], "concludedValue": "node_modules/@iconify-json/catppuccin/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "atomiks" } ], "group": "@floating-ui", "name": "react", "version": "0.27.20", "description": "Floating UI for React", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40floating-ui/react@0.27.20", "externalReferences": [ { "type": "website", "url": "https://floating-ui.com/docs/react" }, { "type": "vcs", "url": "https://github.com/floating-ui/floating-ui.git" } ], "type": "library", "bom-ref": "pkg:npm/@floating-ui/react@0.27.20", "properties": [ { "name": "SrcFile", "value": "node_modules/@floating-ui/react/package.json" }, { "name": "ImportedModules", "value": "react,useEffect,react/useEffect,useState,react/useState,Dispatch,react/Dispatch,SetStateAction,react/SetStateAction,useCallback,react/useCallback,ReactNode,react/ReactNode,PointerEvent,react/PointerEvent,useRef,react/useRef,CSSProperties,react/CSSProperties,useMemo,react/useMemo,createContext,react/createContext,react/use,memo,react/memo" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@floating-ui/react/package.json" } ], "concludedValue": "node_modules/@floating-ui/react/package.json" } ], "occurrences": [ { "location": "app/components/diff/use-diff-tokens.ts", "line": 6 }, { "location": "app/components/diff/use-diff-tokens.ts", "line": 36 }, { "location": "app/components/diff/use-diff-tokens.ts", "line": 38 }, { "location": "app/components/theme.ts", "line": 3 }, { "location": "app/components/theme.ts", "line": 30 }, { "location": "app/components/theme.ts", "line": 32 }, { "location": "app/components/theme.ts", "line": 34 }, { "location": "app/components/theme.ts", "line": 38 }, { "location": "app/components/use-rpc-resource.ts", "line": 4 }, { "location": "app/components/use-rpc-resource.ts", "line": 5 }, { "location": "app/components/use-rpc-resource.ts", "line": 24 }, { "location": "app/components/use-rpc-resource.ts", "line": 25 }, { "location": "app/components/use-rpc-resource.ts", "line": 26 }, { "location": "app/components/use-rpc-resource.ts", "line": 28 }, { "location": "app/components/use-rpc-resource.ts", "line": 44 }, { "location": "app/app/layout.tsx", "line": 2 }, { "location": "app/components/commit-details-panel.tsx", "line": 5 }, { "location": "app/components/commit-details-panel.tsx", "line": 15 }, { "location": "app/components/dashboard.tsx", "line": 5 }, { "location": "app/components/dashboard.tsx", "line": 6 }, { "location": "app/components/dashboard.tsx", "line": 41 }, { "location": "app/components/dashboard.tsx", "line": 42 }, { "location": "app/components/dashboard.tsx", "line": 45 }, { "location": "app/components/dashboard.tsx", "line": 54 }, { "location": "app/components/dashboard.tsx", "line": 151 }, { "location": "app/components/dashboard.tsx", "line": 152 }, { "location": "app/components/dashboard.tsx", "line": 153 }, { "location": "app/components/dashboard.tsx", "line": 157 }, { "location": "app/components/dashboard.tsx", "line": 163 }, { "location": "app/components/diff/diff-file.tsx", "line": 3 }, { "location": "app/components/diff/diff-view.tsx", "line": 5 }, { "location": "app/components/diff/diff-view.tsx", "line": 57 }, { "location": "app/components/diff/diff-view.tsx", "line": 58 }, { "location": "app/components/diff/diff-view.tsx", "line": 92 }, { "location": "app/components/diff/diff-view.tsx", "line": 119 }, { "location": "app/components/log-panel.tsx", "line": 5 }, { "location": "app/components/log-panel.tsx", "line": 21 }, { "location": "app/components/log-panel.tsx", "line": 22 }, { "location": "app/components/log-panel.tsx", "line": 23 }, { "location": "app/components/log-panel.tsx", "line": 24 }, { "location": "app/components/log-panel.tsx", "line": 25 }, { "location": "app/components/log-panel.tsx", "line": 26 }, { "location": "app/components/log-panel.tsx", "line": 27 }, { "location": "app/components/log-panel.tsx", "line": 28 }, { "location": "app/components/log-panel.tsx", "line": 29 }, { "location": "app/components/log-panel.tsx", "line": 31 }, { "location": "app/components/log-panel.tsx", "line": 35 }, { "location": "app/components/log-panel.tsx", "line": 79 }, { "location": "app/components/log-panel.tsx", "line": 93 }, { "location": "app/components/log-panel.tsx", "line": 100 }, { "location": "app/components/log-panel.tsx", "line": 106 }, { "location": "app/components/log-panel.tsx", "line": 115 }, { "location": "app/components/rpc-provider.tsx", "line": 5 }, { "location": "app/components/rpc-provider.tsx", "line": 8 }, { "location": "app/components/rpc-provider.tsx", "line": 16 }, { "location": "app/components/rpc-provider.tsx", "line": 19 }, { "location": "app/components/rpc-provider.tsx", "line": 23 }, { "location": "app/components/rpc-provider.tsx", "line": 25 }, { "location": "app/components/status-panel.tsx", "line": 4 }, { "location": "app/components/status-panel.tsx", "line": 11 }, { "location": "app/components/status-panel.tsx", "line": 33 }, { "location": "app/components/status-panel.tsx", "line": 35 }, { "location": "app/components/status-panel.tsx", "line": 36 }, { "location": "app/components/status-panel.tsx", "line": 37 }, { "location": "app/components/status-panel.tsx", "line": 38 }, { "location": "app/components/status-panel.tsx", "line": 42 }, { "location": "app/components/status-panel.tsx", "line": 55 }, { "location": "app/components/status-panel.tsx", "line": 68 }, { "location": "app/components/status-panel.tsx", "line": 86 }, { "location": "app/components/ui/avatar.tsx", "line": 3 }, { "location": "app/components/ui/avatar.tsx", "line": 4 }, { "location": "app/components/ui/avatar.tsx", "line": 82 }, { "location": "app/components/ui/avatar.tsx", "line": 83 }, { "location": "app/components/ui/avatar.tsx", "line": 85 }, { "location": "app/components/ui/badge.tsx", "line": 3 }, { "location": "app/components/ui/button.tsx", "line": 8 }, { "location": "app/components/ui/file-icon.tsx", "line": 1 }, { "location": "app/components/ui/icon.tsx", "line": 1 }, { "location": "app/components/ui/scroll-area.tsx", "line": 4 }, { "location": "app/components/ui/skeleton.tsx", "line": 1 }, { "location": "app/components/ui/textarea.tsx", "line": 1 }, { "location": "app/components/views/log-panel-view.tsx", "line": 20 }, { "location": "app/components/views/log-panel-view.tsx", "line": 262 }, { "location": "app/components/views/log-panel-view.tsx", "line": 273 }, { "location": "app/components/views/log-panel-view.tsx", "line": 276 }, { "location": "app/components/views/log-panel-view.tsx", "line": 277 }, { "location": "app/components/views/log-panel-view.tsx", "line": 296 }, { "location": "app/components/views/log-panel-view.tsx", "line": 421 }, { "location": "app/components/views/log-panel-view.tsx", "line": 435 }, { "location": "app/components/views/log-panel-view.tsx", "line": 436 }, { "location": "app/components/views/log-panel-view.tsx", "line": 437 }, { "location": "app/components/views/log-panel-view.tsx", "line": 438 }, { "location": "app/components/views/log-panel-view.tsx", "line": 441 }, { "location": "app/components/views/log-panel-view.tsx", "line": 446 }, { "location": "app/components/views/status-panel-view.stories.tsx", "line": 3 }, { "location": "app/components/views/status-panel-view.stories.tsx", "line": 40 }, { "location": "app/components/views/status-panel-view.tsx", "line": 4 } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@devframes", "name": "service-shiki", "version": "1.2.5", "description": "Devframe wire service that renders Shiki syntax highlighting on the server, so plugins stop re-bundling highlighters.", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40devframes/service-shiki@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ], "type": "library", "bom-ref": "pkg:npm/@devframes/service-shiki@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@devframes/service-shiki/package.json" }, { "name": "ImportedModules", "value": "@devframes/service-shiki,ShikiTokens,@devframes/service-shiki/ShikiTokens" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@devframes/service-shiki/package.json" } ], "concludedValue": "node_modules/@devframes/service-shiki/package.json" } ], "occurrences": [ { "location": "app/components/diff/use-diff-tokens.ts", "line": 5 } ] }, "tags": [ "plugins", "service" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@devframes", "name": "service-git", "version": "1.2.5", "description": "Devframe wire service exposing read/write git operations (status, log, show, diff, branches, stage, unstage, commit) over RPC.", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40devframes/service-git@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ], "type": "library", "bom-ref": "pkg:npm/@devframes/service-git@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@devframes/service-git/package.json" }, { "name": "ImportedModules", "value": "@devframes/service-git,CommitDetail,@devframes/service-git/CommitDetail,GitBranches,@devframes/service-git/GitBranches,FileStatusCode,@devframes/service-git/FileStatusCode,Commit,@devframes/service-git/Commit,GitStatus,@devframes/service-git/GitStatus,StatusFileEntry,@devframes/service-git/StatusFileEntry" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@devframes/service-git/package.json" } ], "concludedValue": "node_modules/@devframes/service-git/package.json" } ], "occurrences": [ { "location": "src/node/index.ts", "line": 3 }, { "location": "app/components/commit-details-panel.tsx", "line": 3 }, { "location": "app/components/dashboard.tsx", "line": 3 }, { "location": "app/components/diff/diff-view.tsx", "line": 3 }, { "location": "app/components/log-panel.tsx", "line": 3 }, { "location": "app/components/ui/status-mark.tsx", "line": 1 }, { "location": "app/components/views/commit-details-view.stories.tsx", "line": 1 }, { "location": "app/components/views/commit-details-view.tsx", "line": 3 }, { "location": "app/components/views/log-panel-view.stories.tsx", "line": 1 }, { "location": "app/components/views/log-panel-view.tsx", "line": 3 }, { "location": "app/components/views/status-panel-view.stories.tsx", "line": 1 }, { "location": "app/components/views/status-panel-view.tsx", "line": 3 } ] }, "tags": [ "rpc", "service" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@devframes", "name": "plugin-git--assets", "version": "1.2.5", "description": "Prebuilt browser assets (SPA) for @devframes/plugin-git, served on demand through devframe's remote-assets back-proxy.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40devframes/plugin-git--assets@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devframes/devframe#readme" }, { "type": "vcs", "url": "git+https://github.com/devframes/devframe.git" } ], "type": "library", "bom-ref": "pkg:npm/@devframes/plugin-git--assets@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@devframes/plugin-git--assets/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@devframes/plugin-git--assets/package.json" } ], "concludedValue": "node_modules/@devframes/plugin-git--assets/package.json" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@antfu", "name": "design", "version": "0.6.0", "description": "A customizable, composable design system for devtools-style Vue apps — a UnoCSS preset, Vue primitives, a design skill, and an a11y contrast check", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40antfu/design@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu/design#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu/design.git" } ], "type": "library", "bom-ref": "pkg:npm/@antfu/design@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@antfu/design/package.json" }, { "name": "ImportedModules", "value": "@antfu/design/styles.css" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@antfu/design/package.json" } ], "concludedValue": "node_modules/@antfu/design/package.json" } ], "occurrences": [ { "location": "app/app/layout.tsx", "line": 4 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@devframes/plugin-git@1.2.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.6", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-17T17:45:39Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 17, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'plugin-git' with version '1.2.5'. The package type in this SBOM is npm with 9 purl namespaces described under components. The components were identified from 31 source files." } ] }